@sentry/junior 0.239.0 → 0.241.0

package/dist/{agent-hooks-DzfA5m3R.js → agent-hooks-C5zYOaJk.js}

@@ -1,18 +1,19 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { a as embedTexts, r as completeObject } from "./client-DNf-sJmM.js";
-import { I as isRecord$1, a as extractGenAiUsageSummary, d as logException, f as logInfo, p as logWarn, v as setSpanAttributes, w as withSpan, y as setSpanStatus } from "./logging-Crg0e1jb.js";
+import { a as embedTexts, r as completeObject } from "./client-CRZ-i1tH.js";
+import { I as isRecord$1, a as extractGenAiUsageSummary, d as logException, f as logInfo, p as logWarn, v as setSpanAttributes, w as withSpan, y as setSpanStatus } from "./logging-LQnLlPf8.js";
 import { a as getClient$1 } from "./sentry-CgWZM_kV.js";
-import { t as canExposeConversationPayload } from "./conversation-privacy-CrYizZM3.js";
-import { i as getChatConfig, n as botConfig, o as getSlackBotToken } from "./config-B8QN-04U.js";
+import { t as canExposeConversationPayload } from "./conversation-privacy-D5Byl5eC.js";
+import { i as getChatConfig, n as botConfig, o as getSlackBotToken } from "./config-CCI82OTD.js";
 import { r as defaultModelId } from "./model-profile-BwU8mqwD.js";
 import { d as parseSlackTeamId, g as parseSlackMessageTs, i as isActorUserId, o as parseActorUserId, u as parseSlackChannelReferenceId } from "./actor-BTtLaeWy.js";
-import { c as getConversationEventStore, d as getDb, f as getSqlExecutor, h as createSqlStore, i as resolveViewerUser, r as readActorIdentity, w as hasAgentTurnUsage } from "./viewer-EftpWXcF.js";
+import { O as readUserTimezone, T as hasAgentTurnUsage, c as getConversationEventStore, d as getDb, f as getSqlExecutor, h as createSqlStore, i as resolveViewerUser, k as saveUserTimezone, r as readActorIdentity } from "./viewer-D6stAU7h.js";
 import { n as juniorDestinations } from "./destinations-BeBiJeEM.js";
-import { C as juniorCodeChanges, D as juniorConversations, O as juniorIdentities, S as juniorConversationAnnotations, T as juniorAttachments, _ as juniorConversationBriefs, b as juniorConversationEvents, h as juniorConversationParticipants, i as juniorWorkspaces, k as juniorUsers, n as juniorSnapshots, r as juniorWorkspaceRepos, w as juniorCodeRepositories } from "./executor-BQV1Zc1z.js";
+import { C as juniorCodeChanges, D as juniorConversations, O as juniorIdentities, S as juniorConversationAnnotations, T as juniorAttachments, _ as juniorConversationBriefs, b as juniorConversationEvents, h as juniorConversationParticipants, i as juniorWorkspaces, k as juniorUsers, n as juniorSnapshots, r as juniorWorkspaceRepos, w as juniorCodeRepositories } from "./executor-CewKi7EG.js";
 import { o as decodeStoredConversationEvent } from "./history-BLTUgFYO.js";
-import { p as credentialSubjectSchema } from "./registry-BJME30oR.js";
+import { p as credentialSubjectSchema } from "./registry-DPDH6s5G.js";
 import { B as parseBriefInput, C as conversationReportEventSchema, N as readMessageAttachments, W as readMessageCardRefs, z as conversationBriefSchema } from "./conversation-DwD-vquD.js";
-import { C as getDefaultRedisStateAdapterFor, N as SANDBOX_WORKSPACE_ROOT, k as sleep$1, l as isSandboxMissingError, n as hash, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-XzHSfIah.js";
+import { C as getDefaultRedisStateAdapterFor, N as SANDBOX_WORKSPACE_ROOT, k as sleep$1, l as isSandboxMissingError, n as hash, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-mWuVZ8ht.js";
+import { i as isValidTimeZone } from "./cadence-D00SCzT1.js";
 import { n as briefEntriesFromReportEvents, s as generateBrief, t as BRIEF_PROMPT } from "./prompt-CMU-B4FA.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { z } from "zod";
@@ -142,2005 +143,2095 @@ function renderJuniorNativeConversationEvent(args) {
 	return presentation === void 0 ? void 0 : conversationEventPresentationSchema.parse(presentation);
 }
 //#endregion
-//#region src/chat/plugins/annotations.ts
-function annotationFromRow(row) {
-	const parsed = conversationAnnotationInputSchema.safeParse(row.annotation);
-	if (!parsed.success) return void 0;
-	return {
-		...parsed.data,
-		plugin: row.plugin,
-		createdAt: row.createdAt.toISOString(),
-		updatedAt: row.updatedAt.toISOString()
-	};
-}
-function createPluginAnnotations(args) {
-	return {
-		async upsert(input) {
-			const annotation = conversationAnnotationInputSchema.parse(input);
-			const now = /* @__PURE__ */ new Date();
-			await args.db.insert(juniorConversationAnnotations).values({
-				annotation,
-				conversationId: args.conversationId,
-				createdAt: now,
-				key: annotation.key,
-				kind: annotation.kind,
-				plugin: args.plugin,
-				updatedAt: now
-			}).onConflictDoUpdate({
-				target: [
-					juniorConversationAnnotations.conversationId,
-					juniorConversationAnnotations.plugin,
-					juniorConversationAnnotations.kind,
-					juniorConversationAnnotations.key
-				],
-				set: {
-					annotation,
-					updatedAt: now
-				}
-			});
-		},
-		async remove(kind, key) {
-			await args.db.delete(juniorConversationAnnotations).where(and(eq(juniorConversationAnnotations.conversationId, args.conversationId), eq(juniorConversationAnnotations.plugin, args.plugin), eq(juniorConversationAnnotations.kind, kind), eq(juniorConversationAnnotations.key, key)));
-		},
-		async list() {
-			return (await listConversationAnnotations(args.db, args.conversationId)).filter((a) => a.plugin === args.plugin);
-		}
-	};
+//#region src/chat/slack/workspace-context.ts
+const workspaceTeamIdStorage = new AsyncLocalStorage();
+/** Run a callback with the Slack workspace team ID for the inbound webhook. */
+function runWithWorkspaceTeamId(teamId, fn) {
+	if (!teamId) return fn();
+	return workspaceTeamIdStorage.run(teamId, fn);
 }
-/** Load stored annotations for one conversation, newest update first. */
-async function listConversationAnnotations(db, conversationId) {
-	return (await listConversationAnnotationsById(db, [conversationId])).get(conversationId) ?? [];
+/** Return the Slack workspace team ID for the current inbound webhook. */
+function getWorkspaceTeamId() {
+	return workspaceTeamIdStorage.getStore();
 }
-/** Load stored annotations for a bounded set of conversations. */
-async function listConversationAnnotationsById(db, conversationIds) {
-	const byConversation = /* @__PURE__ */ new Map();
-	if (conversationIds.length === 0) return byConversation;
-	const rows = await db.select().from(juniorConversationAnnotations).where(inArray(juniorConversationAnnotations.conversationId, [...conversationIds])).orderBy(desc(juniorConversationAnnotations.updatedAt));
-	for (const row of rows) {
-		const annotation = annotationFromRow(row);
-		if (!annotation) continue;
-		const current = byConversation.get(row.conversationId);
-		if (current) current.push(annotation);
-		else byConversation.set(row.conversationId, [annotation]);
+//#endregion
+//#region src/chat/slack/client.ts
+var SlackActionError = class extends Error {
+	code;
+	apiError;
+	needed;
+	provided;
+	statusCode;
+	requestId;
+	errorData;
+	retryAfterSeconds;
+	detail;
+	detailLine;
+	detailRule;
+	constructor(message, code, options = {}) {
+		super(message);
+		this.name = "SlackActionError";
+		this.code = code;
+		this.apiError = options.apiError;
+		this.needed = options.needed;
+		this.provided = options.provided;
+		this.statusCode = options.statusCode;
+		this.requestId = options.requestId;
+		this.errorData = options.errorData;
+		this.retryAfterSeconds = options.retryAfterSeconds;
+		this.detail = options.detail;
+		this.detailLine = options.detailLine;
+		this.detailRule = options.detailRule;
+	}
+};
+function serializeSlackErrorData(data) {
+	if (!data || typeof data !== "object") return;
+	const filtered = Object.fromEntries(Object.entries(data).filter(([key]) => key !== "error"));
+	if (Object.keys(filtered).length === 0) return;
+	try {
+		const serialized = JSON.stringify(filtered);
+		return serialized.length <= 600 ? serialized : `${serialized.slice(0, 597)}...`;
+	} catch {
+		return;
 	}
-	return byConversation;
 }
-//#endregion
-//#region src/chat/conversations/annotation-results.ts
-/** Save object annotations and retain returned facts in the tool result. */
-async function saveObjectAnnotations(conversationId, plugin, value) {
-	const annotations = objectAnnotationSchema.array().parse(value);
-	await getDb().transaction(async (db) => {
-		const store = createPluginAnnotations({
-			conversationId,
-			plugin,
-			db
-		});
-		for (const annotation of annotations) {
-			await store.upsert(annotation);
-			await store.remove("resource_link", annotation.key);
+/** Extract a header value by case-insensitive name from a raw headers object. */
+function getHeaderString(headers, name) {
+	if (!headers || typeof headers !== "object") return;
+	const key = name.toLowerCase();
+	const entries = headers;
+	for (const [entryKey, value] of Object.entries(entries)) {
+		if (entryKey.toLowerCase() !== key) continue;
+		if (typeof value === "string") return value;
+		if (Array.isArray(value)) {
+			const first = value.find((entry) => typeof entry === "string");
+			return typeof first === "string" ? first : void 0;
 		}
-	});
-	return annotations.map((annotation) => ({
-		...annotation,
-		plugin
-	}));
+	}
 }
-/** Save annotations from a successful plugin tool result and attach their cards. */
-async function annotateToolResult(conversationId, plugin, result) {
-	if (!isRecord$1(result) || result.isError === true) return result;
-	const details = isRecord$1(result.details) ? result.details : result;
-	if (details.timed_out === true || details.isError === true || !Array.isArray(details.objectAnnotations)) return result;
-	const cards = await saveObjectAnnotations(conversationId, plugin, details.objectAnnotations);
-	const { objectAnnotations: _annotations, ...rest } = details;
-	const annotated = {
-		...rest,
-		objectCards: cards
-	};
-	if (isRecord$1(result.details)) return {
-		...result,
-		details: annotated
-	};
-	return annotated;
+function parseSlackCanvasDetail(detail) {
+	if (typeof detail !== "string") return {};
+	const trimmed = detail.trim();
+	if (!trimmed) return {};
+	const parsed = { detail: trimmed };
+	const lineMatch = trimmed.match(/line\s+(\d+):/i);
+	if (lineMatch) {
+		const line = Number.parseInt(lineMatch[1] ?? "", 10);
+		if (Number.isFinite(line)) parsed.detailLine = line;
+	}
+	if (/unsupported heading depth/i.test(trimmed)) parsed.detailRule = "unsupported_heading_depth";
+	return parsed;
 }
-//#endregion
-//#region src/chat/conversations/sql/privacy.ts
-const privacyRoot = alias(juniorConversations, "privacy_root");
-/** Accept only a structurally valid persisted root as privacy authority. */
-async function readRootCandidate(executor, conversationId) {
-	const row = (await executor.db().select({
-		requestedConversationId: juniorConversations.conversationId,
-		requestedParentConversationId: juniorConversations.parentConversationId,
-		requestedRootConversationId: juniorConversations.rootConversationId,
-		rootConversationId: privacyRoot.conversationId,
-		rootDestinationId: privacyRoot.destinationId,
-		rootParentConversationId: privacyRoot.parentConversationId,
-		rootRootConversationId: privacyRoot.rootConversationId
-	}).from(juniorConversations).leftJoin(privacyRoot, eq(privacyRoot.conversationId, juniorConversations.rootConversationId)).where(eq(juniorConversations.conversationId, conversationId)))[0];
-	return row?.requestedRootConversationId !== null && (row?.requestedParentConversationId !== null || row?.requestedRootConversationId === row?.requestedConversationId) && row?.rootConversationId === row.requestedRootConversationId && row.rootRootConversationId === row.rootConversationId && row.rootParentConversationId === null && row.rootDestinationId !== null ? {
-		destinationId: row.rootDestinationId,
-		rootConversationId: row.rootConversationId
-	} : void 0;
+/**
+* Ambient destination-installation token for Slack outbound calls, bound by
+* installation-scoped entry points so writes carry the destination
+* workspace's credentials instead of the process-global env token.
+*/
+const installationTokenStorage = new AsyncLocalStorage();
+const clientsByToken = /* @__PURE__ */ new Map();
+/**
+* Bind a workspace installation token for all Slack Web API calls inside
+* `fn`, so multi-workspace outbound writes use the destination workspace's
+* credentials rather than the env fallback token.
+*/
+function runWithSlackInstallationToken(token, fn) {
+	const trimmed = token.trim();
+	if (!trimmed) throw new SlackActionError("Slack installation token binding requires a non-empty token", "missing_token");
+	return installationTokenStorage.run({ token: trimmed }, fn);
 }
-async function readCandidateVisibility(executor, candidate) {
-	const destinations = await executor.db().select({ visibility: juniorDestinations.visibility }).from(juniorDestinations).where(eq(juniorDestinations.id, candidate.destinationId)).for("share");
-	return {
-		rootConversationId: candidate.rootConversationId,
-		visibility: destinations[0]?.visibility ?? null
-	};
+/**
+* Token precedence: ambient installation token, then env token, then a hard
+* failure for team-scoped calls — a call scoped to one workspace must never
+* silently fall through to another workspace's credentials.
+*/
+function resolveSlackToken() {
+	const ambientToken = installationTokenStorage.getStore()?.token;
+	if (ambientToken) return ambientToken;
+	const envToken = getSlackBotToken();
+	if (envToken) return envToken;
+	const teamId = getWorkspaceTeamId();
+	if (teamId) throw new SlackActionError(`Slack call is scoped to workspace ${teamId} but no installation token is bound and no default bot token is configured`, "missing_token");
+	throw new SlackActionError("SLACK_BOT_TOKEN (or SLACK_BOT_USER_TOKEN) is required for Slack Web API actions in this service", "missing_token");
+}
+/** Normalize Junior Slack references to native Slack conversation IDs. */
+function normalizeSlackConversationId(channelId) {
+	return parseSlackChannelReferenceId(channelId);
 }
 /**
-* Resolve a conversation's privacy authority from its persisted root.
-*
-* Missing or structurally invalid root metadata fails closed. The root
-* destination is locked so callers that keep the transaction open receive a
-* stable visibility decision.
+* Return the per-token cached WebClient. `withSlackRetries` owns retry
+* classification for this boundary: the WebClient's built-in policy would
+* re-post timed-out writes (a duplicate-message hazard) and sleep for the
+* full unbounded Retry-After inside the request, so both internal behaviors
+* are disabled here.
 */
-async function resolveRootVisibility(executor, conversationId) {
-	const candidate = await readRootCandidate(executor, conversationId);
-	if (!candidate) return {
-		rootConversationId: conversationId,
-		visibility: null
-	};
-	return readCandidateVisibility(executor, candidate);
+function getClient() {
+	const token = resolveSlackToken();
+	let cached = clientsByToken.get(token);
+	if (!cached) {
+		cached = new WebClient(token, {
+			retryConfig: { retries: 0 },
+			rejectRateLimitedCalls: true
+		});
+		clientsByToken.set(token, cached);
+	}
+	return cached;
 }
-//#endregion
-//#region src/chat/briefs/events.ts
-/** Durable cost and size record for one stored Brief version. */
-const briefUpdatedEvent = defineConversationEvent({
-	name: "brief_updated",
-	version: 1,
-	schema: z.object({
-		version: z.number().int().positive(),
-		modelId: z.string().min(1),
-		costUsd: z.number().finite().nonnegative().optional(),
-		decisions: z.number().int().nonnegative(),
-		openDecisions: z.number().int().nonnegative(),
-		links: z.number().int().nonnegative()
-	}).strict(),
-	renderEvent(event) {
-		return {
-			icon: "activity",
-			title: `Brief updated (v${event.version})`
-		};
-	}
-});
-//#endregion
-//#region src/chat/slack/attachments.ts
-/** Save the vision summary for a stored Slack attachment. */
-async function recordSlackAttachment(args) {
-	await args.db.db().update(juniorAttachments).set({ visionSummary: args.visionSummary }).where(and(eq(juniorAttachments.id, args.attachmentId), eq(juniorAttachments.conversationId, args.conversationId), isNull(juniorAttachments.deleteRequestedAt)));
+function mapSlackError(error) {
+	if (error instanceof SlackActionError) return error;
+	const candidate = error;
+	const apiError = candidate.data?.error;
+	const message = candidate.message ?? "Slack action failed";
+	const baseOptions = {
+		apiError,
+		statusCode: candidate.statusCode,
+		requestId: getHeaderString(candidate.headers, "x-slack-req-id"),
+		errorData: serializeSlackErrorData(candidate.data),
+		...parseSlackCanvasDetail(candidate.data?.detail)
+	};
+	if (apiError === "missing_scope") return new SlackActionError(message, "missing_scope", {
+		...baseOptions,
+		needed: candidate.data?.needed,
+		provided: candidate.data?.provided
+	});
+	if (apiError === "not_in_channel") return new SlackActionError(message, "not_in_channel", baseOptions);
+	if (apiError === "restricted_action_read_only_channel") return new SlackActionError(message, "read_only_channel", baseOptions);
+	if (apiError === "already_reacted") return new SlackActionError(message, "already_reacted", baseOptions);
+	if (apiError === "no_reaction") return new SlackActionError(message, "no_reaction", baseOptions);
+	if (apiError === "invalid_arguments") return new SlackActionError(message, "invalid_arguments", baseOptions);
+	if (apiError === "invalid_cursor") return new SlackActionError(message, "invalid_arguments", baseOptions);
+	if (apiError === "invalid_name") return new SlackActionError(message, "invalid_arguments", baseOptions);
+	if (apiError === "not_found" || apiError === "channel_not_found" || apiError === "message_not_found") return new SlackActionError(message, "not_found", baseOptions);
+	if (apiError === "feature_not_enabled" || apiError === "not_allowed_token_type") return new SlackActionError(message, "feature_unavailable", baseOptions);
+	if (apiError === "canvas_creation_failed") return new SlackActionError(message, "canvas_creation_failed", baseOptions);
+	if (apiError === "canvas_editing_failed") return new SlackActionError(message, "canvas_editing_failed", baseOptions);
+	if (candidate.code === "slack_webapi_rate_limited_error" || candidate.statusCode === 429) return new SlackActionError(message, "rate_limited", {
+		...baseOptions,
+		retryAfterSeconds: candidate.retryAfter
+	});
+	return new SlackActionError(message, "internal_error", baseOptions);
 }
-/** Read a saved vision summary for one live attachment. */
-async function readAttachmentVisionSummary(args) {
-	const [row] = await args.db.db().select({ visionSummary: juniorAttachments.visionSummary }).from(juniorAttachments).where(and(eq(juniorAttachments.id, args.attachmentId), eq(juniorAttachments.conversationId, args.conversationId), isNull(juniorAttachments.deleteRequestedAt)));
-	return row?.visionSummary;
+const MAX_RETRY_DELAY_MS = 1e4;
+const MAX_TOTAL_RETRY_DELAY_MS = 2e4;
+const CONNECTION_ERROR_CODES = /* @__PURE__ */ new Set([
+	"ECONNREFUSED",
+	"ECONNRESET",
+	"ENOTFOUND",
+	"EAI_AGAIN"
+]);
+const TIMEOUT_ERROR_CODES = /* @__PURE__ */ new Set([
+	"ETIMEDOUT",
+	"ECONNABORTED",
+	"ESOCKETTIMEDOUT"
+]);
+function findNetworkErrorCode(error, depth = 0) {
+	if (!error || typeof error !== "object" || depth > 4) return;
+	const candidate = error;
+	if (typeof candidate.code === "string" && (CONNECTION_ERROR_CODES.has(candidate.code) || TIMEOUT_ERROR_CODES.has(candidate.code))) return candidate.code;
+	return findNetworkErrorCode(candidate.original, depth + 1) ?? findNetworkErrorCode(candidate.cause, depth + 1);
 }
-/** Match live conversation attachments to Slack file ids. */
-async function matchSlackAttachments(args) {
-	if (args.providerIds.length === 0) return [];
-	return await args.db.db().select({
-		id: juniorAttachments.id,
-		providerId: juniorAttachments.providerId,
-		bytes: juniorAttachments.bytes,
-		contentType: juniorAttachments.contentType,
-		filename: juniorAttachments.filename
-	}).from(juniorAttachments).where(and(eq(juniorAttachments.conversationId, args.conversationId), eq(juniorAttachments.provider, "slack"), inArray(juniorAttachments.providerId, args.providerIds), isNull(juniorAttachments.deleteRequestedAt)));
+function hasSocketHangUpMessage(error) {
+	return error instanceof Error && error.message.toLowerCase().includes("socket hang up");
 }
-/** Read the Slack file identity retained by the Chat SDK. */
-function getSlackFileId(attachment) {
-	const metadataId = attachment.fetchMetadata?.fileId;
-	if (metadataId) return metadataId;
-	return (attachment.url ?? attachment.fetchMetadata?.url ?? "").match(/(?:^|[-/])(F[A-Z0-9]+)(?:[-/]|$)/i)?.[1];
+/**
+* Classify a failed Slack call for retry: rate limits, Slack 5xx, and
+* connection-phase failures are always retryable; timeouts are retried only
+* for idempotent operations because Slack may already have accepted the
+* request.
+*/
+function classifySlackRetry(raw, mapped) {
+	if (mapped.code === "rate_limited") return "rate_limited";
+	if (mapped.statusCode !== void 0 && mapped.statusCode >= 500) return "server_error";
+	const networkCode = findNetworkErrorCode(raw);
+	if (networkCode && CONNECTION_ERROR_CODES.has(networkCode)) return "connection";
+	if (networkCode && TIMEOUT_ERROR_CODES.has(networkCode)) return "timeout";
+	if (hasSocketHangUpMessage(raw)) return "connection";
+	return "none";
 }
-//#endregion
-//#region src/api/conversations/message-attachments.ts
-/** Resolve saved Slack file references without exposing private storage details. */
-async function hydrateMessageAttachments(db, conversationId, events) {
-	const messages = events.flatMap((event) => event.data.type === "message" ? [event.data] : []);
-	const ids = [...new Set(messages.flatMap((message) => slackFileIds(message.meta)))];
-	if (!ids.length) return;
-	const attachments = await matchSlackAttachments({
-		db,
-		conversationId,
-		providerIds: ids
-	});
-	const byFileId = new Map(attachments.map(({ providerId, ...attachment }) => [providerId, attachment]));
-	for (const message of messages) {
-		const stored = readMessageAttachments(message.meta?.attachments);
-		const matched = slackFileIds(message.meta).flatMap((id) => {
-			const attachment = byFileId.get(id);
-			return attachment ? [attachment] : [];
-		});
-		if (matched.length) message.meta = {
-			...message.meta,
-			attachments: [...stored, ...matched]
-		};
+/**
+* Run a Slack Web API call with bounded retries so transient platform
+* failures do not surface as turn failures, while non-idempotent posts are
+* never re-sent when Slack may already have accepted them.
+*
+* Retry classes: rate limits (bounded Retry-After), connection-phase network
+* failures, and Slack 5xx responses always retry; request timeouts retry only
+* when the caller marks the operation `idempotent`.
+*/
+async function withSlackRetries(task, maxAttempts = 3, context = {}) {
+	let attempt = 0;
+	let totalDelayMs = 0;
+	const action = context.action ?? "unknown";
+	while (attempt < maxAttempts) {
+		attempt += 1;
+		const attemptNumber = attempt;
+		try {
+			return await withSpan(`POST slack.com/api/${action}`, "http.client", {}, async () => {
+				try {
+					return await task();
+				} catch (error) {
+					const mapped = mapSlackError(error);
+					const errorAttrs = { "error.type": mapped.code };
+					if (mapped.apiError) errorAttrs["app.slack.api_error_code"] = mapped.apiError;
+					if (mapped.code === "rate_limited") {
+						errorAttrs["http.response.status_code"] = 429;
+						if (mapped.retryAfterSeconds) errorAttrs["app.slack.retry_after_ms"] = mapped.retryAfterSeconds * 1e3;
+					} else if (mapped.statusCode != null) errorAttrs["http.response.status_code"] = mapped.statusCode;
+					setSpanAttributes(errorAttrs);
+					setSpanStatus("error");
+					throw error;
+				}
+			}, {
+				"http.request.method": "POST",
+				"server.address": "slack.com",
+				"url.scheme": "https",
+				"url.path": `/api/${action}`,
+				"app.slack.method": action,
+				"app.retry.max_attempts": maxAttempts,
+				...attemptNumber > 1 ? { "http.request.resend_count": attemptNumber - 1 } : void 0,
+				...context.attributes ?? {},
+				...context.spanAttributes ?? {}
+			});
+		} catch (error) {
+			const mapped = mapSlackError(error);
+			const retryClass = classifySlackRetry(error, mapped);
+			const isRetryable = retryClass === "rate_limited" || retryClass === "connection" || retryClass === "server_error" || retryClass === "timeout" && context.idempotent === true;
+			const remainingDelayBudgetMs = MAX_TOTAL_RETRY_DELAY_MS - totalDelayMs;
+			const baseLogAttributes = {
+				"app.slack.action": action,
+				"app.slack.error_code": mapped.code,
+				...mapped.apiError ? { "app.slack.api_error": mapped.apiError } : void 0,
+				...mapped.detail ? { "app.slack.detail": mapped.detail } : void 0,
+				...mapped.detailLine !== void 0 ? { "app.slack.detail_line": mapped.detailLine } : void 0,
+				...mapped.detailRule ? { "app.slack.detail_rule": mapped.detailRule } : void 0,
+				...mapped.requestId ? { "app.slack.request_id": mapped.requestId } : void 0,
+				...mapped.statusCode !== void 0 ? { "http.response.status_code": mapped.statusCode } : void 0,
+				...context.attributes ?? {}
+			};
+			if (!isRetryable || attempt >= maxAttempts || remainingDelayBudgetMs <= 0) {
+				logWarn("slack.action.failed", {
+					...baseLogAttributes,
+					...mapped.errorData ? { "app.slack.error_data": mapped.errorData } : void 0
+				});
+				throw mapped;
+			}
+			logWarn("slack.action.retrying", {
+				...baseLogAttributes,
+				"app.slack.retry_attempt": attempt,
+				"app.slack.retry_class": retryClass
+			});
+			const retryAfterMs = retryClass === "rate_limited" && mapped.retryAfterSeconds && mapped.retryAfterSeconds > 0 ? mapped.retryAfterSeconds * 1e3 : void 0;
+			const backoffMs = Math.min(2e3, 250 * 2 ** (attempt - 1));
+			const delayMs = Math.min(retryAfterMs ?? backoffMs, MAX_RETRY_DELAY_MS, remainingDelayBudgetMs);
+			totalDelayMs += delayMs;
+			await sleep$1(delayMs);
+		}
 	}
+	throw new SlackActionError("Slack action exhausted retries", "internal_error");
 }
-function slackFileIds(meta) {
-	const ids = meta?.slackFileIds ?? meta?.imageFileIds;
-	return Array.isArray(ids) ? ids.filter((id) => typeof id === "string") : [];
-}
-//#endregion
-//#region src/chat/sentry-links.ts
-function getSentryOrgSlug() {
-	return process.env.SENTRY_ORG_SLUG?.trim() || void 0;
+/**
+* Slack Web API client for the current destination workspace: the ambient
+* installation token when one is bound, otherwise the env bot token for
+* single-workspace deployments. Fails instead of falling back when the call
+* is workspace-scoped and no installation token can be resolved, so a write
+* never goes out with another workspace's credentials.
+*/
+function getSlackClient(options) {
+	if (options) return new WebClient(resolveSlackToken(), {
+		retryConfig: { retries: 0 },
+		rejectRateLimitedCalls: true,
+		timeout: options.timeoutMs
+	});
+	return getClient();
 }
-function isSentrySaasDsnHost(host) {
-	return host === "sentry.io" || host.endsWith(".sentry.io");
+/**
+* Slack channel ID prefixes:
+* - C: channel — modern private channels also use C, so the prefix never
+*   proves a channel is public
+* - G: legacy private channel / group DM
+* - D: direct message (1:1)
+*/
+function isDmChannel(channelId) {
+	const normalized = normalizeSlackConversationId(channelId);
+	return Boolean(normalized && normalized.startsWith("D"));
 }
-function buildSentryWebBaseUrl(dsn) {
-	if (isSentrySaasDsnHost(dsn.host)) return "https://sentry.io";
-	const port = dsn.port ? `:${dsn.port}` : "";
-	const path = dsn.path ? `/${dsn.path}` : "";
-	return `${dsn.protocol}://${dsn.host}${port}${path}`;
+/**
+* Conversation-scoped Slack contexts backed by a concrete conversation ID.
+* Includes channels/groups/DMs (C/G/D).
+*/
+function isConversationScopedChannel(channelId) {
+	const normalized = normalizeSlackConversationId(channelId);
+	if (!normalized) return false;
+	return normalized.startsWith("C") || normalized.startsWith("G") || normalized.startsWith("D");
 }
-function buildSentryOrgPath(args) {
-	const dsn = getClient$1()?.getDsn();
-	if (!dsn?.host || !dsn.projectId) return;
-	const orgSlug = getSentryOrgSlug();
-	if (!orgSlug) return;
-	const params = new URLSearchParams();
-	params.set("project", dsn.projectId);
-	if (args.query) for (const [key, value] of Object.entries(args.query)) params.set(key, value);
-	const path = `${args.path}?${params.toString()}`;
-	if (isSentrySaasDsnHost(dsn.host)) return `https://${orgSlug}.sentry.io/${path}`;
-	return `${buildSentryWebBaseUrl(dsn)}/organizations/${orgSlug}/${path}`;
+function isConversationChannel(channelId) {
+	const normalized = normalizeSlackConversationId(channelId);
+	if (!normalized) return false;
+	return normalized.startsWith("C") || normalized.startsWith("G");
 }
-/** Build a Sentry conversation URL only when the runtime has enough Sentry config. */
-function buildSentryConversationUrl(conversationId) {
-	return buildSentryOrgPath({ path: `explore/conversations/${encodeURIComponent(conversationId)}/` });
+async function getFilePermalink(fileId) {
+	const client = getClient();
+	return (await withSlackRetries(() => client.files.info({ file: fileId }), 3, {
+		action: "files.info",
+		idempotent: true,
+		spanAttributes: { "app.slack.file_id": fileId }
+	})).file?.permalink;
 }
-/** Build a Sentry event URL only when the runtime has enough Sentry config. */
-function buildSentryEventUrl(eventId) {
-	return buildSentryOrgPath({
-		path: "issues/",
-		query: { query: eventId }
+async function downloadPrivateSlackFile(url) {
+	const token = resolveSlackToken();
+	return withSpan("GET files.slack.com", "http.client", {}, async () => {
+		const response = await fetch(url, { headers: { Authorization: `Bearer ${token}` } });
+		setSpanAttributes({ "http.response.status_code": response.status });
+		if (!response.ok) {
+			setSpanAttributes({ "error.type": String(response.status) });
+			setSpanStatus("error");
+			throw new Error(`Slack file download failed: ${response.status}`);
+		}
+		return Buffer.from(await response.arrayBuffer());
+	}, {
+		"http.request.method": "GET",
+		"server.address": "files.slack.com",
+		"url.scheme": "https",
+		"app.slack.method": "files.download"
 	});
 }
 //#endregion
-//#region src/api/conversations/event-model.ts
-/** Apply recorded model choices without carrying a previous turn's settings forward. */
-function conversationEventModel(data, current) {
-	if (data.type === "turn_started") return void 0;
-	if (data.type === "turn_routed" || data.type === "handoff") return {
-		modelId: data.modelId,
-		modelProfile: data.modelProfile,
-		...data.reasoningLevel ? { reasoningLevel: data.reasoningLevel } : void 0
-	};
-	if (data.type === "assistant_message") {
-		const model = text$1(data.model);
-		const provider = text$1(data.provider);
-		if (model) {
-			const modelId = model.includes("/") || !provider ? model : `${provider}/${model}`;
-			return {
-				...current,
-				modelId
-			};
+//#region src/chat/slack/user.ts
+const slackUserInfoSchema = z.object({
+	ok: z.literal(true),
+	user: z.object({
+		name: z.string().nullish(),
+		tz: z.string().nullish(),
+		profile: z.object({
+			email: z.string().nullish(),
+			real_name: z.string().nullish()
+		}).optional()
+	})
+});
+const USER_CACHE_TTL_MS = 3e5;
+const userCache = /* @__PURE__ */ new Map();
+function userCacheKey(teamId, userId) {
+	return `${teamId}:${userId}`;
+}
+function readFromCache(teamId, userId) {
+	const hit = userCache.get(userCacheKey(teamId, userId));
+	if (!hit) return null;
+	if (hit.expiresAt < Date.now()) {
+		userCache.delete(userCacheKey(teamId, userId));
+		return null;
+	}
+	return hit.value;
+}
+function writeToCache(teamId, userId, value) {
+	userCache.set(userCacheKey(teamId, userId), {
+		value,
+		expiresAt: Date.now() + USER_CACHE_TTL_MS
+	});
+}
+/** Fetch Slack user profile info with in-memory TTL cache to avoid repeated API calls. */
+async function lookupSlackUser(teamId, userId) {
+	if (!teamId || !userId) return null;
+	const cached = readFromCache(teamId, userId);
+	if (cached) return cached;
+	const token = getSlackBotToken();
+	if (!token) return null;
+	try {
+		const response = await fetch(`https://slack.com/api/users.info?user=${encodeURIComponent(userId)}`, { headers: { authorization: `Bearer ${token}` } });
+		if (!response.ok) {
+			logWarn("slack.user.lookup.failed", {
+				"enduser.id": userId,
+				"app.slack.team_id": teamId,
+				"http.response.status_code": response.status
+			});
+			return null;
 		}
+		const parsed = slackUserInfoSchema.safeParse(await response.json());
+		if (!parsed.success) return null;
+		const payload = parsed.data;
+		const result = {
+			userName: payload.user.name?.trim() || void 0,
+			fullName: payload.user.profile?.real_name?.trim() || void 0,
+			email: payload.user.profile?.email?.trim() || void 0,
+			timezone: payload.user.tz?.trim() || void 0
+		};
+		writeToCache(teamId, userId, result);
+		return result;
+	} catch (error) {
+		logWarn("slack.user.lookup.failed", {
+			"enduser.id": userId,
+			"app.slack.team_id": teamId,
+			"exception.message": error instanceof Error ? error.message : String(error)
+		});
+		return null;
 	}
-	return current;
 }
-function text$1(value) {
-	return typeof value === "string" && value.length > 0 ? value : void 0;
+//#endregion
+//#region src/chat/identities/timezone.ts
+const DEFAULT_TIMEZONE = "America/Los_Angeles";
+/** The install timezone, used when Junior does not know a person's timezone. */
+function defaultTimezone() {
+	return process.env.JUNIOR_TIMEZONE?.trim() || DEFAULT_TIMEZONE;
 }
-/** Allowlist model-call diagnostics; never expose opaque provider metadata. */
-function conversationEventModelCall(data) {
-	if (data.type !== "assistant_message") return void 0;
-	const usage = extractGenAiUsageSummary(data);
-	const provider = text$1(data.provider);
-	const api = text$1(data.api);
-	const stopReason = text$1(data.stopReason);
-	return {
-		...provider ? { provider } : void 0,
-		...api ? { api } : void 0,
-		...stopReason ? { stopReason } : void 0,
-		...hasAgentTurnUsage(usage) ? { usage } : void 0
-	};
+/**
+* Pick a person's timezone: their Slack profile, then the saved user
+* timezone, then the install default. A valid Slack timezone is saved on the
+* linked user, so later lookups without Slack still find it.
+*/
+async function resolveUserTimezone(args) {
+	const timezone = (args.slack ? await lookupSlackUser(args.slack.teamId, args.slack.userId) : void 0)?.timezone;
+	if (timezone && isValidTimeZone(timezone)) {
+		if (args.userId) await saveUserTimezone(args.db, args.userId, timezone, args.nowMs);
+		return timezone;
+	}
+	return (args.userId ? await readUserTimezone(args.db, args.userId) : void 0) ?? defaultTimezone();
 }
 //#endregion
-//#region src/api/conversations/events.ts
-/** Canonical event types that can contribute to the reporting projection. */
-const conversationReportSourceEventTypes = [
-	"message",
-	"message_handled",
-	"assistant_message",
-	"tool_result",
-	"tool_execution_started",
-	"guardian_action_reviewed",
-	"turn_started",
-	"turn_context",
-	"structured_event",
-	"attachments_delivered",
-	"turn_routed",
-	"turn_completed",
-	"turn_failed",
-	"compaction",
-	"handoff",
-	"subagent_started",
-	"subagent_ended"
-];
-const reportingAssistantMessageSchema = z.object({
-	type: z.literal("assistant_message"),
-	content: z.array(z.unknown())
-}).passthrough();
-const reportingToolCallPartSchema = z.object({
-	type: z.literal("toolCall"),
-	id: z.string().min(1),
-	name: z.string().min(1),
-	arguments: z.unknown()
-}).passthrough();
-const reportingToolResultMessageSchema = z.object({
-	type: z.literal("tool_result"),
-	toolCallId: z.string().min(1),
-	toolName: z.string().min(1).optional(),
-	name: z.string().min(1).optional(),
-	content: z.array(z.unknown()),
-	details: z.unknown().optional(),
-	isError: z.boolean().optional()
-}).passthrough();
-const reportingToolResultDetailsSchema = z.object({
-	ok: z.boolean().optional(),
-	status: z.string().optional()
-}).passthrough();
-const reportingTextPartSchema = z.object({
-	type: z.literal("text"),
-	text: z.string()
-}).passthrough();
-const reportingReasoningPartSchema = z.object({
-	type: z.literal("thinking"),
-	thinking: z.string(),
-	redacted: z.literal(true).optional()
-}).passthrough();
-const reportingMediaPartSchema = z.object({
-	type: z.enum(["image", "audio"]),
-	mimeType: z.string().min(1).optional()
-}).passthrough();
-const reportingMessageAuthorSchema = z.object({
-	fullName: z.string().min(1).optional(),
-	userId: z.string().min(1).optional(),
-	userName: z.string().min(1).optional()
-}).passthrough();
-/** Retain model-visible text and media descriptors, dropping all opaque fields. */
-function sanitizeModelContentPart(value) {
-	const text = reportingTextPartSchema.safeParse(value);
-	if (text.success) return {
-		type: "text",
-		text: text.data.text
-	};
-	const media = reportingMediaPartSchema.safeParse(value);
-	if (!media.success) return void 0;
+//#region src/chat/plugins/annotations.ts
+function annotationFromRow(row) {
+	const parsed = conversationAnnotationInputSchema.safeParse(row.annotation);
+	if (!parsed.success) return void 0;
 	return {
-		type: media.data.type,
-		...media.data.mimeType ? { mimeType: media.data.mimeType } : void 0
+		...parsed.data,
+		plugin: row.plugin,
+		createdAt: row.createdAt.toISOString(),
+		updatedAt: row.updatedAt.toISOString()
 	};
 }
-/** Convert allowlisted Pi content parts into the reporting result value. */
-function modelVisibleToolOutput(content) {
-	const sanitized = content.map(sanitizeModelContentPart).filter((part) => part !== void 0);
-	if (sanitized.length === 0) return void 0;
-	if (sanitized.length !== 1) return sanitized;
-	const only = sanitized[0];
-	return only.type === "text" ? only.text : only;
-}
-function reportMessageActorIdentity(data) {
-	if (data.role !== "user") return void 0;
-	const author = reportingMessageAuthorSchema.safeParse(data.meta?.author);
-	if (!author.success) return void 0;
-	const actorIdentity = {
-		...author.data.fullName ? { fullName: author.data.fullName } : void 0,
-		...author.data.userId ? { slackUserId: author.data.userId } : void 0,
-		...author.data.userName ? { slackUserName: author.data.userName } : void 0
+function createPluginAnnotations(args) {
+	return {
+		async upsert(input) {
+			const annotation = conversationAnnotationInputSchema.parse(input);
+			const now = /* @__PURE__ */ new Date();
+			await args.db.insert(juniorConversationAnnotations).values({
+				annotation,
+				conversationId: args.conversationId,
+				createdAt: now,
+				key: annotation.key,
+				kind: annotation.kind,
+				plugin: args.plugin,
+				updatedAt: now
+			}).onConflictDoUpdate({
+				target: [
+					juniorConversationAnnotations.conversationId,
+					juniorConversationAnnotations.plugin,
+					juniorConversationAnnotations.kind,
+					juniorConversationAnnotations.key
+				],
+				set: {
+					annotation,
+					updatedAt: now
+				}
+			});
+		},
+		async remove(kind, key) {
+			await args.db.delete(juniorConversationAnnotations).where(and(eq(juniorConversationAnnotations.conversationId, args.conversationId), eq(juniorConversationAnnotations.plugin, args.plugin), eq(juniorConversationAnnotations.kind, kind), eq(juniorConversationAnnotations.key, key)));
+		},
+		async list() {
+			return (await listConversationAnnotations(args.db, args.conversationId)).filter((a) => a.plugin === args.plugin);
+		}
 	};
-	return Object.keys(actorIdentity).length > 0 ? actorIdentity : void 0;
 }
-/** Project native assistant tool calls through the existing reporting shape. */
-function reportToolCalls(args) {
-	const message = reportingAssistantMessageSchema.safeParse(args.message);
-	if (!message.success) return void 0;
-	const calls = message.data.content.flatMap((part) => {
-		const call = reportingToolCallPartSchema.safeParse(part);
-		if (!call.success) return [];
-		return [{
-			toolCallId: call.data.id,
-			name: call.data.name,
-			status: "running",
-			startedAt: new Date(args.createdAtMs).toISOString(),
-			startedSeq: args.seq,
-			...args.canExposePayload && call.data.arguments !== void 0 ? { input: call.data.arguments } : void 0
-		}];
-	});
-	return calls.length > 0 ? {
-		type: "tool_calls",
-		calls
-	} : void 0;
+/** Load stored annotations for one conversation, newest update first. */
+async function listConversationAnnotations(db, conversationId) {
+	return (await listConversationAnnotationsById(db, [conversationId])).get(conversationId) ?? [];
 }
-/** Project assistant reasoning with tool ids retained only for display order. */
-function reportAssistantMessage(args) {
-	const message = reportingAssistantMessageSchema.safeParse(args.message);
-	if (!message.success) return void 0;
-	if (!message.data.content.some((part) => {
-		const reasoning = reportingReasoningPartSchema.safeParse(part);
-		return reasoning.success && reasoning.data.redacted !== true && reasoning.data.thinking.trim().length > 0;
-	})) return reportToolCalls(args) ?? {
-		type: "assistant_message",
-		parts: []
-	};
-	const reasoningParts = [];
-	const assistantParts = [];
-	for (const part of message.data.content) {
-		const reasoning = reportingReasoningPartSchema.safeParse(part);
-		if (reasoning.success) {
-			if (reasoning.data.redacted !== true && reasoning.data.thinking.trim().length > 0) {
-				const projected = {
-					type: "reasoning",
-					...args.canExposePayload ? { text: reasoning.data.thinking } : { redacted: true }
-				};
-				reasoningParts.push(projected);
-				assistantParts.push(projected);
-			}
-			continue;
-		}
-		const call = reportingToolCallPartSchema.safeParse(part);
-		if (call.success) assistantParts.push({
-			type: "tool_call",
-			toolCallId: call.data.id
-		});
+/** Load stored annotations for a bounded set of conversations. */
+async function listConversationAnnotationsById(db, conversationIds) {
+	const byConversation = /* @__PURE__ */ new Map();
+	if (conversationIds.length === 0) return byConversation;
+	const rows = await db.select().from(juniorConversationAnnotations).where(inArray(juniorConversationAnnotations.conversationId, [...conversationIds])).orderBy(desc(juniorConversationAnnotations.updatedAt));
+	for (const row of rows) {
+		const annotation = annotationFromRow(row);
+		if (!annotation) continue;
+		const current = byConversation.get(row.conversationId);
+		if (current) current.push(annotation);
+		else byConversation.set(row.conversationId, [annotation]);
 	}
-	const toolCalls = reportToolCalls(args);
-	if (toolCalls?.type === "tool_calls") return {
-		...toolCalls,
-		assistant: { parts: assistantParts }
+	return byConversation;
+}
+//#endregion
+//#region src/chat/conversations/annotation-results.ts
+/** Save object annotations and retain returned facts in the tool result. */
+async function saveObjectAnnotations(conversationId, plugin, value) {
+	const annotations = objectAnnotationSchema.array().parse(value);
+	await getDb().transaction(async (db) => {
+		const store = createPluginAnnotations({
+			conversationId,
+			plugin,
+			db
+		});
+		for (const annotation of annotations) {
+			await store.upsert(annotation);
+			await store.remove("resource_link", annotation.key);
+		}
+	});
+	return annotations.map((annotation) => ({
+		...annotation,
+		plugin
+	}));
+}
+/** Save annotations from a successful plugin tool result and attach their cards. */
+async function annotateToolResult(conversationId, plugin, result) {
+	if (!isRecord$1(result) || result.isError === true) return result;
+	const details = isRecord$1(result.details) ? result.details : result;
+	if (details.timed_out === true || details.isError === true || !Array.isArray(details.objectAnnotations)) return result;
+	const cards = await saveObjectAnnotations(conversationId, plugin, details.objectAnnotations);
+	const { objectAnnotations: _annotations, ...rest } = details;
+	const annotated = {
+		...rest,
+		objectCards: cards
 	};
-	return reasoningParts.length > 0 ? {
-		type: "assistant_message",
-		parts: reasoningParts
+	if (isRecord$1(result.details)) return {
+		...result,
+		details: annotated
+	};
+	return annotated;
+}
+//#endregion
+//#region src/chat/conversations/sql/privacy.ts
+const privacyRoot = alias(juniorConversations, "privacy_root");
+/** Accept only a structurally valid persisted root as privacy authority. */
+async function readRootCandidate(executor, conversationId) {
+	const row = (await executor.db().select({
+		requestedConversationId: juniorConversations.conversationId,
+		requestedParentConversationId: juniorConversations.parentConversationId,
+		requestedRootConversationId: juniorConversations.rootConversationId,
+		rootConversationId: privacyRoot.conversationId,
+		rootDestinationId: privacyRoot.destinationId,
+		rootParentConversationId: privacyRoot.parentConversationId,
+		rootRootConversationId: privacyRoot.rootConversationId
+	}).from(juniorConversations).leftJoin(privacyRoot, eq(privacyRoot.conversationId, juniorConversations.rootConversationId)).where(eq(juniorConversations.conversationId, conversationId)))[0];
+	return row?.requestedRootConversationId !== null && (row?.requestedParentConversationId !== null || row?.requestedRootConversationId === row?.requestedConversationId) && row?.rootConversationId === row.requestedRootConversationId && row.rootRootConversationId === row.rootConversationId && row.rootParentConversationId === null && row.rootDestinationId !== null ? {
+		destinationId: row.rootDestinationId,
+		rootConversationId: row.rootConversationId
 	} : void 0;
 }
-/** Project a native tool result without exposing host-only result details. */
-function reportToolResult(args) {
-	const message = reportingToolResultMessageSchema.safeParse(args.message);
-	if (!message.success) return void 0;
-	const details = reportingToolResultDetailsSchema.safeParse(message.data.details);
-	const outcome = message.data.isError === true || details.success && (details.data.ok === false || details.data.status === "error") ? "error" : "completed";
-	const output = modelVisibleToolOutput(message.data.content);
-	const name = message.data.toolName ?? message.data.name ?? args.start?.name;
-	if (!name) return void 0;
+async function readCandidateVisibility(executor, candidate) {
+	const destinations = await executor.db().select({ visibility: juniorDestinations.visibility }).from(juniorDestinations).where(eq(juniorDestinations.id, candidate.destinationId)).for("share");
 	return {
-		type: "tool_calls",
-		calls: [{
-			toolCallId: message.data.toolCallId,
-			name,
-			status: outcome,
-			...args.start ? {
-				startedAt: new Date(args.start.createdAtMs).toISOString(),
-				startedSeq: args.start.seq
-			} : void 0,
-			...args.canExposePayload && output !== void 0 ? { output } : void 0
-		}]
+		rootConversationId: candidate.rootConversationId,
+		visibility: destinations[0]?.visibility ?? null
 	};
 }
-/** Return tool result ids that may need start metadata from outside a page. */
-function conversationReportToolResultIds(events) {
-	return [...new Set(events.flatMap((event) => {
-		const result = reportingToolResultMessageSchema.safeParse(event.data);
-		return result.success ? [result.data.toolCallId] : [];
-	}))];
+/**
+* Resolve a conversation's privacy authority from its persisted root.
+*
+* Missing or structurally invalid root metadata fails closed. The root
+* destination is locked so callers that keep the transaction open receive a
+* stable visibility decision.
+*/
+async function resolveRootVisibility(executor, conversationId) {
+	const candidate = await readRootCandidate(executor, conversationId);
+	if (!candidate) return {
+		rootConversationId: conversationId,
+		visibility: null
+	};
+	return readCandidateVisibility(executor, candidate);
 }
-function reportEventData(args) {
-	const { data } = args;
-	if (data.type === "structured_event") {
-		if (!args.canExposePayload) return void 0;
-		const presentation = data.namespace === "junior" ? renderJuniorNativeConversationEvent(data) : renderPluginConversationEvent(data);
-		if (!presentation) return void 0;
+//#endregion
+//#region src/chat/briefs/events.ts
+/** Durable cost and size record for one stored Brief version. */
+const briefUpdatedEvent = defineConversationEvent({
+	name: "brief_updated",
+	version: 1,
+	schema: z.object({
+		version: z.number().int().positive(),
+		modelId: z.string().min(1),
+		costUsd: z.number().finite().nonnegative().optional(),
+		decisions: z.number().int().nonnegative(),
+		openDecisions: z.number().int().nonnegative(),
+		links: z.number().int().nonnegative()
+	}).strict(),
+	renderEvent(event) {
 		return {
-			type: "structured_event",
-			namespace: data.namespace,
-			name: data.name,
-			version: data.version,
-			...data.turnId ? { turnId: data.turnId } : void 0,
-			presentation
+			icon: "activity",
+			title: `Brief updated (v${event.version})`
 		};
 	}
-	switch (data.type) {
-		case "message": {
-			const actorIdentity = args.canExposePayload ? reportMessageActorIdentity(data) : void 0;
-			return {
-				type: "message",
-				messageId: data.messageId,
-				role: data.role,
-				...data.meta?.source === "web" || data.meta?.source === "slack" ? { source: data.meta.source } : void 0,
-				...actorIdentity ? { actorIdentity } : void 0,
-				eventObjectType: objectTypeSchema.safeParse(data.meta?.eventObjectType).data,
-				...typeof data.meta?.eventType === "string" ? { eventType: data.meta.eventType } : void 0,
-				...typeof data.meta?.explicitMention === "boolean" ? { explicitMention: data.meta.explicitMention } : void 0,
-				...args.canExposePayload && typeof data.meta?.trustedSummary === "string" ? { trustedSummary: data.meta.trustedSummary } : void 0,
-				...args.canExposePayload && (data.meta?.cards || data.meta?.objectCards) ? { cards: readMessageCardRefs(data.meta) } : void 0,
-				...args.canExposePayload ? {
-					text: data.text,
-					...data.meta?.attachments ? { attachments: readMessageAttachments(data.meta.attachments) } : void 0
-				} : { redacted: true }
-			};
-		}
-		case "message_handled": return {
-			type: "message_handled",
-			messageId: data.messageId
-		};
-		case "turn_started": return {
-			type: "turn_lifecycle",
-			turnId: data.turnId,
-			state: "started",
-			...data.inputMessageIds.length > 0 ? { inputMessageIds: data.inputMessageIds } : void 0
+});
+//#endregion
+//#region src/chat/slack/attachments.ts
+/** Save the vision summary for a stored Slack attachment. */
+async function recordSlackAttachment(args) {
+	await args.db.db().update(juniorAttachments).set({ visionSummary: args.visionSummary }).where(and(eq(juniorAttachments.id, args.attachmentId), eq(juniorAttachments.conversationId, args.conversationId), isNull(juniorAttachments.deleteRequestedAt)));
+}
+/** Read a saved vision summary for one live attachment. */
+async function readAttachmentVisionSummary(args) {
+	const [row] = await args.db.db().select({ visionSummary: juniorAttachments.visionSummary }).from(juniorAttachments).where(and(eq(juniorAttachments.id, args.attachmentId), eq(juniorAttachments.conversationId, args.conversationId), isNull(juniorAttachments.deleteRequestedAt)));
+	return row?.visionSummary;
+}
+/** Match live conversation attachments to Slack file ids. */
+async function matchSlackAttachments(args) {
+	if (args.providerIds.length === 0) return [];
+	return await args.db.db().select({
+		id: juniorAttachments.id,
+		providerId: juniorAttachments.providerId,
+		bytes: juniorAttachments.bytes,
+		contentType: juniorAttachments.contentType,
+		filename: juniorAttachments.filename
+	}).from(juniorAttachments).where(and(eq(juniorAttachments.conversationId, args.conversationId), eq(juniorAttachments.provider, "slack"), inArray(juniorAttachments.providerId, args.providerIds), isNull(juniorAttachments.deleteRequestedAt)));
+}
+/** Read the Slack file identity retained by the Chat SDK. */
+function getSlackFileId(attachment) {
+	const metadataId = attachment.fetchMetadata?.fileId;
+	if (metadataId) return metadataId;
+	return (attachment.url ?? attachment.fetchMetadata?.url ?? "").match(/(?:^|[-/])(F[A-Z0-9]+)(?:[-/]|$)/i)?.[1];
+}
+//#endregion
+//#region src/api/conversations/message-attachments.ts
+/** Resolve saved Slack file references without exposing private storage details. */
+async function hydrateMessageAttachments(db, conversationId, events) {
+	const messages = events.flatMap((event) => event.data.type === "message" ? [event.data] : []);
+	const ids = [...new Set(messages.flatMap((message) => slackFileIds(message.meta)))];
+	if (!ids.length) return;
+	const attachments = await matchSlackAttachments({
+		db,
+		conversationId,
+		providerIds: ids
+	});
+	const byFileId = new Map(attachments.map(({ providerId, ...attachment }) => [providerId, attachment]));
+	for (const message of messages) {
+		const stored = readMessageAttachments(message.meta?.attachments);
+		const matched = slackFileIds(message.meta).flatMap((id) => {
+			const attachment = byFileId.get(id);
+			return attachment ? [attachment] : [];
+		});
+		if (matched.length) message.meta = {
+			...message.meta,
+			attachments: [...stored, ...matched]
 		};
-		case "turn_context":
-			if (!args.canExposePayload) return;
-			return {
-				type: "turn_context",
-				turnId: data.turnId,
-				pluginName: data.pluginName,
-				kind: data.kind,
-				version: data.version,
-				content: data.content
-			};
-		case "attachments_delivered":
-			if (!args.canExposePayload) return;
-			return {
-				type: "attachments_delivered",
-				attachments: data.attachments
-			};
-		case "turn_routed": return {
-			type: "turn_routed",
-			turnId: data.turnId,
-			modelProfile: data.modelProfile,
-			modelId: data.modelId,
-			...data.costUsd !== void 0 ? { costUsd: data.costUsd } : void 0,
-			reasoningLevel: data.reasoningLevel,
-			...data.confidence !== void 0 ? { confidence: data.confidence } : void 0,
-			source: data.source
-		};
-		case "guardian_action_reviewed": return {
-			type: "guardian_action_reviewed",
-			turnId: data.turnId,
-			toolCallId: data.toolCallId,
-			toolName: data.toolName,
-			decision: data.decision,
-			riskLevel: data.riskLevel,
-			userAuthorization: data.userAuthorization
-		};
-		case "turn_completed": return {
-			type: "turn_lifecycle",
-			turnId: data.turnId,
-			state: data.outcome === "success" ? "succeeded" : "no_reply"
-		};
-		case "turn_failed": {
-			const eventId = data.eventId;
-			const sentryEventUrl = eventId ? buildSentryEventUrl(eventId) : void 0;
-			return {
-				type: "turn_lifecycle",
-				turnId: data.turnId,
-				state: "failed",
-				failureCode: data.failureCode,
-				...data.failureReason ? { failureReason: data.failureReason } : void 0,
-				...eventId ? { eventId } : void 0,
-				...sentryEventUrl ? { sentryEventUrl } : void 0
-			};
-		}
-		case "compaction": return {
-			type: "compaction",
-			modelProfile: data.modelProfile,
-			modelId: data.modelId,
-			...args.canExposePayload && data.summary ? { summary: data.summary } : void 0,
-			...data.details ? { details: data.details } : void 0
-		};
-		default: return;
 	}
 }
-/**
-* Project canonical events into the ordered reporting boundary.
-*
-* `canExposePayload` must come from the authorized conversation-detail policy;
-* this projection never derives visibility or authorization from event data.
-*/
-function projectConversationReportEventPage(args) {
-	const subagentStarts = /* @__PURE__ */ new Map();
-	for (const event of args.subagentStartEvents ?? []) if (event.data.type === "subagent_started") subagentStarts.set(event.data.subagentInvocationId, {
-		createdAtMs: event.createdAtMs,
-		data: event.data,
-		seq: event.seq
-	});
-	const toolStarts = /* @__PURE__ */ new Map();
-	for (const event of args.toolStartEvents ?? []) if (event.data.type === "tool_execution_started") {
-		const current = toolStarts.get(event.data.toolCallId);
-		if (!current || event.seq < current.seq) toolStarts.set(event.data.toolCallId, {
-			createdAtMs: event.createdAtMs,
-			name: event.data.toolName,
-			seq: event.seq
-		});
-	}
-	const projected = [];
-	let model;
-	for (const event of args.modelContextEvents ?? []) {
-		model = conversationEventModel(event.data, model);
-		if (event.data.type === "turn_completed" || event.data.type === "turn_failed") model = void 0;
-	}
-	for (const event of args.events) {
-		model = conversationEventModel(event.data, model);
-		const eventModel = model;
-		const modelCall = conversationEventModelCall(event.data);
-		if (event.data.type === "turn_completed" || event.data.type === "turn_failed") model = void 0;
-		let data;
-		if (event.data.type === "assistant_message" || event.data.type === "tool_result") {
-			const reportArgs = {
-				canExposePayload: args.canExposePayload,
-				createdAtMs: event.createdAtMs,
-				message: event.data,
-				seq: event.seq
-			};
-			const result = reportingToolResultMessageSchema.safeParse(event.data);
-			const start = result.success ? toolStarts.get(result.data.toolCallId) : void 0;
-			data = reportAssistantMessage(reportArgs) ?? reportToolResult({
-				canExposePayload: args.canExposePayload,
-				message: event.data,
-				...start && start.seq < event.seq ? { start } : void 0
-			});
-		} else if (event.data.type === "tool_execution_started") {
-			toolStarts.set(event.data.toolCallId, {
-				createdAtMs: event.createdAtMs,
-				name: event.data.toolName,
-				seq: event.seq
-			});
-			data = {
-				type: "tool_calls",
-				calls: [{
-					toolCallId: event.data.toolCallId,
-					name: event.data.toolName,
-					status: "running",
-					startedAt: new Date(event.createdAtMs).toISOString(),
-					startedSeq: event.seq
-				}]
-			};
-		} else if (event.data.type === "subagent_started") {
-			subagentStarts.set(event.data.subagentInvocationId, {
-				createdAtMs: event.createdAtMs,
-				data: event.data,
-				seq: event.seq
-			});
-			data = {
-				type: "subagent",
-				startedSeq: event.seq,
-				startedAt: new Date(event.createdAtMs).toISOString(),
-				childConversationId: event.data.childConversationId,
-				subagentKind: event.data.subagentKind,
-				status: "running",
-				...event.data.parentToolCallId ? { parentToolCallId: event.data.parentToolCallId } : void 0
-			};
-		} else if (event.data.type === "subagent_ended") {
-			const started = subagentStarts.get(event.data.subagentInvocationId);
-			if (started && started.seq < event.seq) {
-				data = {
-					type: "subagent",
-					startedSeq: started.seq,
-					startedAt: new Date(started.createdAtMs).toISOString(),
-					childConversationId: started.data.childConversationId,
-					subagentKind: started.data.subagentKind,
-					...started.data.parentToolCallId ? { parentToolCallId: started.data.parentToolCallId } : void 0,
-					status: event.data.outcome === "success" ? "completed" : event.data.outcome
-				};
-				subagentStarts.delete(event.data.subagentInvocationId);
-			}
-		} else if (event.data.type === "handoff") data = {
-			type: "handoff",
-			modelProfile: event.data.modelProfile,
-			modelId: event.data.modelId,
-			...event.data.reasoningLevel ? { reasoningLevel: event.data.reasoningLevel } : void 0,
-			...event.data.triggeringToolCallId ? { triggeringToolCallId: event.data.triggeringToolCallId } : void 0,
-			...args.canExposePayload && event.data.summary ? { summary: event.data.summary } : void 0
-		};
-		else data = reportEventData({
-			canExposePayload: args.canExposePayload,
-			data: event.data
-		});
-		if (!data) continue;
-		projected.push(conversationReportEventSchema.parse({
-			seq: event.seq,
-			createdAt: new Date(event.createdAtMs).toISOString(),
-			data,
-			...eventModel ? { model: eventModel } : void 0,
-			...modelCall ? { modelCall } : void 0
-		}));
-	}
-	return projected;
+function slackFileIds(meta) {
+	const ids = meta?.slackFileIds ?? meta?.imageFileIds;
+	return Array.isArray(ids) ? ids.filter((id) => typeof id === "string") : [];
 }
 //#endregion
-//#region src/api/conversations/event-page.ts
-const conversationEventColumns = getTableColumns(juniorConversationEvents);
-const MIN_SCAN_SIZE = 64;
-/** Read bounded canonical rows while excluding model-only replacement history. */
-async function readConversationEventRows(executor, args) {
-	return executor.db().select({
-		...conversationEventColumns,
-		payload: sql`case
-        when ${juniorConversationEvents.type} in ('compaction', 'handoff')
-        then jsonb_set(
-          ${juniorConversationEvents.payload},
-          '{replacementHistory}',
-          '[]'::jsonb
-        )
-        else ${juniorConversationEvents.payload}
-      end`
-	}).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, args.conversationId), args.beforeSeq === void 0 ? void 0 : lt(juniorConversationEvents.seq, args.beforeSeq), inArray(juniorConversationEvents.type, args.types ?? [...conversationReportSourceEventTypes]), args.subagentInvocationIds === void 0 ? void 0 : inArray(sql`${juniorConversationEvents.payload}->>'subagentInvocationId'`, args.subagentInvocationIds), args.toolCallIds === void 0 ? void 0 : inArray(sql`${juniorConversationEvents.payload}->>'toolCallId'`, args.toolCallIds))).orderBy(args.direction === "forward" ? asc(juniorConversationEvents.seq) : desc(juniorConversationEvents.seq)).limit(args.limit);
+//#region src/chat/sentry-links.ts
+function getSentryOrgSlug() {
+	return process.env.SENTRY_ORG_SLUG?.trim() || void 0;
 }
-function decodeConversationEventRow(row) {
-	return decodeStoredConversationEvent({
-		schemaVersion: row.schemaVersion,
-		seq: row.seq,
-		historyVersion: row.historyVersion,
-		...row.idempotencyKey ? { idempotencyKey: row.idempotencyKey } : void 0,
-		createdAtMs: row.createdAt.getTime(),
-		type: row.type,
-		payload: row.payload
-	});
+function isSentrySaasDsnHost(host) {
+	return host === "sentry.io" || host.endsWith(".sentry.io");
 }
-/** Project stored rows and resolve entity starts that precede the page. */
-async function projectConversationEventRows(executor, args) {
-	const events = args.rows.map(decodeConversationEventRow).sort((left, right) => left.seq - right.seq);
-	const modelContextRows = events[0] ? (await Promise.all([readConversationEventRows(executor, {
-		conversationId: args.conversationId,
-		beforeSeq: events[0].seq,
-		direction: "backward",
-		limit: 1,
-		types: [
-			"turn_started",
-			"turn_routed",
-			"handoff",
-			"turn_completed",
-			"turn_failed"
-		]
-	}), readConversationEventRows(executor, {
-		conversationId: args.conversationId,
-		beforeSeq: events[0].seq,
-		direction: "backward",
-		limit: 1,
-		types: ["assistant_message"]
-	})])).flat().sort((left, right) => left.seq - right.seq) : [];
-	const endedInvocationIds = [...new Set(events.flatMap((event) => event.data.type === "subagent_ended" ? [event.data.subagentInvocationId] : []))];
-	const subagentStartRows = endedInvocationIds.length === 0 ? [] : await readConversationEventRows(executor, {
-		conversationId: args.conversationId,
-		direction: "forward",
-		limit: endedInvocationIds.length,
-		subagentInvocationIds: endedInvocationIds,
-		types: ["subagent_started"]
-	});
-	const toolResultIds = conversationReportToolResultIds(events);
-	const toolStartRows = toolResultIds.length === 0 ? [] : await readConversationEventRows(executor, {
-		conversationId: args.conversationId,
-		direction: "forward",
-		limit: toolResultIds.length,
-		toolCallIds: toolResultIds,
-		types: ["tool_execution_started"]
-	});
-	if (args.canExposePayload) await hydrateMessageAttachments(executor, args.conversationId, events);
-	return projectConversationReportEventPage({
-		canExposePayload: args.canExposePayload,
-		events,
-		subagentStartEvents: subagentStartRows.map(decodeConversationEventRow),
-		toolStartEvents: toolStartRows.map(decodeConversationEventRow),
-		modelContextEvents: modelContextRows.map(decodeConversationEventRow)
-	});
+function buildSentryWebBaseUrl(dsn) {
+	if (isSentrySaasDsnHost(dsn.host)) return "https://sentry.io";
+	const port = dsn.port ? `:${dsn.port}` : "";
+	const path = dsn.path ? `/${dsn.path}` : "";
+	return `${dsn.protocol}://${dsn.host}${port}${path}`;
 }
-/**
-* Read the latest reporting events before an exclusive boundary.
-*
-* Source rows are scanned in bounded chunks until the requested projected page
-* and one older event are known. This keeps ordinary pages bounded without
-* assuming every agent history event produces a reporting event.
-*/
-async function readConversationEventPage(executor, args) {
-	const scanSize = Math.max(args.limit + 1, MIN_SCAN_SIZE);
-	const rows = [];
-	let beforeSeq = args.beforeSeq;
-	let projected = [];
-	while (projected.length <= args.limit) {
-		const batch = await readConversationEventRows(executor, {
-			beforeSeq,
-			conversationId: args.conversationId,
-			direction: "backward",
-			limit: scanSize
-		});
-		if (batch.length === 0) break;
-		rows.push(...batch);
-		projected = await projectConversationEventRows(executor, {
-			canExposePayload: args.canExposePayload,
-			conversationId: args.conversationId,
-			rows
-		});
-		if (projected.length > args.limit || batch.length < scanSize) break;
-		beforeSeq = batch.at(-1).seq;
-	}
-	const events = projected.slice(-args.limit);
-	return {
-		events,
-		...projected.length > events.length && events[0] ? { previousSeq: events[0].seq } : void 0
-	};
+function buildSentryOrgPath(args) {
+	const dsn = getClient$1()?.getDsn();
+	if (!dsn?.host || !dsn.projectId) return;
+	const orgSlug = getSentryOrgSlug();
+	if (!orgSlug) return;
+	const params = new URLSearchParams();
+	params.set("project", dsn.projectId);
+	if (args.query) for (const [key, value] of Object.entries(args.query)) params.set(key, value);
+	const path = `${args.path}?${params.toString()}`;
+	if (isSentrySaasDsnHost(dsn.host)) return `https://${orgSlug}.sentry.io/${path}`;
+	return `${buildSentryWebBaseUrl(dsn)}/organizations/${orgSlug}/${path}`;
 }
-//#endregion
-//#region src/chat/briefs/input.ts
-const EVENT_PAGE_SIZE = 500;
-async function readReportEventsThrough(executor, conversationId, throughSeq) {
-	const pages = [];
-	let beforeSeq = throughSeq + 1;
-	do {
-		const page = await readConversationEventPage(executor, {
-			beforeSeq,
-			canExposePayload: true,
-			conversationId,
-			limit: EVENT_PAGE_SIZE
-		});
-		pages.unshift(page.events);
-		beforeSeq = page.previousSeq;
-	} while (beforeSeq !== void 0);
-	const bySequence = /* @__PURE__ */ new Map();
-	for (const event of pages.flat()) bySequence.set(event.seq, event);
-	return [...bySequence.values()].sort((left, right) => left.seq - right.seq);
+/** Build a Sentry conversation URL only when the runtime has enough Sentry config. */
+function buildSentryConversationUrl(conversationId) {
+	return buildSentryOrgPath({ path: `explore/conversations/${encodeURIComponent(conversationId)}/` });
 }
-/**
-* Build generator input from SQL through one durable event. The caller owns
-* the boundary, so a Turn that completes during the read cannot be covered by
-* a Brief that never saw it.
-*/
-async function briefInputFromSql(executor, conversationId, throughSeq) {
-	const db = executor.db();
-	const conversation = await createSqlStore(executor).get({ conversationId });
-	if (!conversation) throw new Error(`Conversation ${conversationId} is unavailable`);
-	const [events, annotations, codeChanges] = await Promise.all([
-		readReportEventsThrough(executor, conversationId, throughSeq),
-		listConversationAnnotations(db, conversationId),
-		db.select({
-			closedAt: juniorCodeChanges.closedAt,
-			mergedAt: juniorCodeChanges.mergedAt,
-			number: juniorCodeChanges.number,
-			openedAt: juniorCodeChanges.openedAt,
-			repository: juniorCodeRepositories.name,
-			state: juniorCodeChanges.state,
-			title: juniorCodeChanges.title,
-			url: juniorCodeChanges.url
-		}).from(juniorCodeChanges).innerJoin(juniorCodeRepositories, eq(juniorCodeRepositories.id, juniorCodeChanges.repositoryId)).where(and(arrayContains(juniorCodeChanges.conversationIds, [conversationId]), isNotNull(juniorCodeChanges.url)))
-	]);
-	const location = conversation.location;
-	return parseBriefInput({
-		conversationId,
-		...conversation.title ? { title: conversation.title } : void 0,
-		visibility: conversation.visibility ?? "private",
-		...location ? { location: {
-			provider: location.provider,
-			...conversation.channelName ? { channelName: conversation.channelName } : void 0
-		} } : void 0,
-		entries: briefEntriesFromReportEvents(events),
-		codeChanges: codeChanges.map((change) => ({
-			repository: change.repository,
-			number: change.number,
-			...change.title ? { title: change.title } : void 0,
-			url: change.url,
-			state: change.state,
-			openedAt: change.openedAt.toISOString(),
-			...change.mergedAt ? { mergedAt: change.mergedAt.toISOString() } : void 0,
-			...change.closedAt ? { closedAt: change.closedAt.toISOString() } : void 0
-		})),
-		resources: annotations.map((annotation) => ({
-			label: annotation.label,
-			url: annotation.url,
-			...annotation.status ? { status: annotation.status } : void 0
-		}))
+/** Build a Sentry event URL only when the runtime has enough Sentry config. */
+function buildSentryEventUrl(eventId) {
+	return buildSentryOrgPath({
+		path: "issues/",
+		query: { query: eventId }
 	});
 }
 //#endregion
-//#region src/chat/briefs/operational-report.ts
-const DAY_MS$1 = 864e5;
-const WINDOWS = [
-	7,
-	30,
-	90
-];
-function startOfUtcDay$1(value) {
-	const date = new Date(value);
-	date.setUTCHours(0, 0, 0, 0);
-	return date;
-}
-function formatCount(value) {
-	return new Intl.NumberFormat("en-US").format(value);
+//#region src/api/conversations/event-model.ts
+/** Apply recorded model choices without carrying a previous turn's settings forward. */
+function conversationEventModel(data, current) {
+	if (data.type === "turn_started") return void 0;
+	if (data.type === "turn_routed" || data.type === "handoff") return {
+		modelId: data.modelId,
+		modelProfile: data.modelProfile,
+		...data.reasoningLevel ? { reasoningLevel: data.reasoningLevel } : void 0
+	};
+	if (data.type === "assistant_message") {
+		const model = text$1(data.model);
+		const provider = text$1(data.provider);
+		if (model) {
+			const modelId = model.includes("/") || !provider ? model : `${provider}/${model}`;
+			return {
+				...current,
+				modelId
+			};
+		}
+	}
+	return current;
 }
-function formatUsd(value) {
-	const maximumFractionDigits = value > 0 && value < .01 ? 4 : 2;
-	return new Intl.NumberFormat("en-US", {
-		currency: "USD",
-		maximumFractionDigits,
-		minimumFractionDigits: 2,
-		style: "currency"
-	}).format(value);
+function text$1(value) {
+	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
-/**
-* Build Brief storage and model-cost diagnostics for the System page. Cost
-* comes from retained Conversation events, so spend on purged private
-* Conversations leaves the report with them; the labels say so.
-*/
-async function buildBriefsOperationalReport(args) {
-	const newestDay = startOfUtcDay$1(args.nowMs);
-	const windowStart = /* @__PURE__ */ new Date(newestDay.getTime() - 29 * DAY_MS$1);
-	const windowEnd = new Date(newestDay.getTime() + DAY_MS$1);
-	const [[counts], recentCounts] = await Promise.all([args.db.select({
-		conversations: sql`count(distinct ${juniorConversationBriefs.conversationId})`.mapWith(Number),
-		stored: sql`count(*)`.mapWith(Number)
-	}).from(juniorConversationBriefs), args.db.select({ stored: sql`count(*)`.mapWith(Number) }).from(juniorConversationBriefs).where(and(gte(juniorConversationBriefs.createdAt, windowStart), lt(juniorConversationBriefs.createdAt, windowEnd)))]);
-	const recentDays = args.briefDays.filter((day) => {
-		const dayStart = Date.parse(`${day.date}T00:00:00.000Z`);
-		return dayStart >= windowStart.getTime() && dayStart < windowEnd.getTime();
-	});
-	const recentCost = recentDays.reduce((total, day) => total + day.costUsd, 0);
-	const recentBriefs = recentDays.reduce((total, day) => total + day.events, 0);
+/** Allowlist model-call diagnostics; never expose opaque provider metadata. */
+function conversationEventModelCall(data) {
+	if (data.type !== "assistant_message") return void 0;
+	const usage = extractGenAiUsageSummary(data);
+	const provider = text$1(data.provider);
+	const api = text$1(data.api);
+	const stopReason = text$1(data.stopReason);
 	return {
-		generatedAt: new Date(args.nowMs).toISOString(),
-		title: "Briefs",
-		metrics: [
-			{
-				label: "briefs stored",
-				tone: counts?.stored ? "good" : "neutral",
-				value: formatCount(counts?.stored ?? 0)
-			},
-			{
-				label: "conversations with a brief",
-				value: formatCount(counts?.conversations ?? 0)
-			},
-			{
-				label: "briefs · 30d",
-				value: formatCount(recentCounts[0]?.stored ?? 0)
-			},
-			{
-				label: "cost · 30d · retained",
-				value: formatUsd(recentCost)
-			},
-			{
-				label: "average cost per brief · 30d · retained",
-				value: formatUsd(recentBriefs === 0 ? 0 : recentCost / recentBriefs)
-			}
-		],
-		widgets: [{
-			categories: args.briefDays.map((day) => ({
-				id: day.date,
-				label: day.date,
-				values: {
-					briefs: day.events,
-					costUsd: day.costUsd
-				}
-			})),
-			description: "Stored Brief versions and estimated model cost",
-			id: "briefs-created",
-			series: [{
-				key: "briefs",
-				label: "Briefs"
-			}, {
-				format: "usd",
-				key: "costUsd",
-				label: "Cost"
-			}],
-			timeRangeDays: [...WINDOWS],
-			title: "Briefs created",
-			type: "bar_chart"
-		}]
+		...provider ? { provider } : void 0,
+		...api ? { api } : void 0,
+		...stopReason ? { stopReason } : void 0,
+		...hasAgentTurnUsage(usage) ? { usage } : void 0
 	};
 }
 //#endregion
-//#region src/chat/briefs/store.ts
-function briefVersionFromRow(row) {
-	return {
-		conversationId: row.conversationId,
-		version: row.version,
-		turnId: row.turnId,
-		throughSeq: row.throughSeq,
-		content: conversationBriefSchema.parse(row.content),
-		searchText: row.searchText,
-		modelId: row.modelId,
-		...row.costUsd !== null ? { costUsd: row.costUsd } : void 0,
-		createdAt: row.createdAt
-	};
-}
-/** Append the next Brief version, or return the row for an existing Turn. */
-async function appendConversationBrief(db, input) {
-	return await db.transaction(async (tx) => {
-		const conversation = (await tx.select({
-			conversationId: juniorConversations.conversationId,
-			transcriptPurgedAt: juniorConversations.transcriptPurgedAt
-		}).from(juniorConversations).where(eq(juniorConversations.conversationId, input.conversationId)).for("update"))[0];
-		if (!conversation) throw new Error(`Conversation ${input.conversationId} is unavailable`);
-		if (conversation.transcriptPurgedAt) {
-			if ((await resolveRootVisibility({ db: () => tx }, input.conversationId)).visibility !== "public") throw new Error(`Cannot append a Brief to purged non-public Conversation ${input.conversationId}`);
-		}
-		const existing = await tx.select().from(juniorConversationBriefs).where(and(eq(juniorConversationBriefs.conversationId, input.conversationId), eq(juniorConversationBriefs.turnId, input.turnId))).limit(1);
-		if (existing[0]) return {
-			inserted: false,
-			value: briefVersionFromRow(existing[0])
-		};
-		const version = ((await tx.select({ version: max(juniorConversationBriefs.version) }).from(juniorConversationBriefs).where(eq(juniorConversationBriefs.conversationId, input.conversationId)))[0]?.version ?? 0) + 1;
-		const row = (await tx.insert(juniorConversationBriefs).values({
-			conversationId: input.conversationId,
-			version,
-			turnId: input.turnId,
-			throughSeq: input.throughSeq,
-			content: conversationBriefSchema.parse(input.content),
-			searchText: input.searchText,
-			modelId: input.modelId,
-			costUsd: input.costUsd ?? null
-		}).onConflictDoNothing({ target: [juniorConversationBriefs.conversationId, juniorConversationBriefs.turnId] }).returning())[0];
-		if (!row) throw new Error("Brief insert conflicted after the Turn check");
-		return {
-			inserted: true,
-			value: briefVersionFromRow(row)
-		};
-	});
-}
-/** Read the Brief version produced for one completed Turn. */
-async function readConversationBriefForTurn(db, conversationId, turnId) {
-	const rows = await db.select().from(juniorConversationBriefs).where(and(eq(juniorConversationBriefs.conversationId, conversationId), eq(juniorConversationBriefs.turnId, turnId))).limit(1);
-	return rows[0] ? briefVersionFromRow(rows[0]) : void 0;
+//#region src/api/conversations/events.ts
+/** Canonical event types that can contribute to the reporting projection. */
+const conversationReportSourceEventTypes = [
+	"message",
+	"message_handled",
+	"assistant_message",
+	"tool_result",
+	"tool_execution_started",
+	"guardian_action_reviewed",
+	"turn_started",
+	"turn_context",
+	"structured_event",
+	"attachments_delivered",
+	"turn_routed",
+	"turn_completed",
+	"turn_failed",
+	"compaction",
+	"handoff",
+	"subagent_started",
+	"subagent_ended"
+];
+const reportingAssistantMessageSchema = z.object({
+	type: z.literal("assistant_message"),
+	content: z.array(z.unknown())
+}).passthrough();
+const reportingToolCallPartSchema = z.object({
+	type: z.literal("toolCall"),
+	id: z.string().min(1),
+	name: z.string().min(1),
+	arguments: z.unknown()
+}).passthrough();
+const reportingToolResultMessageSchema = z.object({
+	type: z.literal("tool_result"),
+	toolCallId: z.string().min(1),
+	toolName: z.string().min(1).optional(),
+	name: z.string().min(1).optional(),
+	content: z.array(z.unknown()),
+	details: z.unknown().optional(),
+	isError: z.boolean().optional()
+}).passthrough();
+const reportingToolResultDetailsSchema = z.object({
+	ok: z.boolean().optional(),
+	status: z.string().optional()
+}).passthrough();
+const reportingTextPartSchema = z.object({
+	type: z.literal("text"),
+	text: z.string()
+}).passthrough();
+const reportingReasoningPartSchema = z.object({
+	type: z.literal("thinking"),
+	thinking: z.string(),
+	redacted: z.literal(true).optional()
+}).passthrough();
+const reportingMediaPartSchema = z.object({
+	type: z.enum(["image", "audio"]),
+	mimeType: z.string().min(1).optional()
+}).passthrough();
+const reportingMessageAuthorSchema = z.object({
+	fullName: z.string().min(1).optional(),
+	userId: z.string().min(1).optional(),
+	userName: z.string().min(1).optional()
+}).passthrough();
+/** Retain model-visible text and media descriptors, dropping all opaque fields. */
+function sanitizeModelContentPart(value) {
+	const text = reportingTextPartSchema.safeParse(value);
+	if (text.success) return {
+		type: "text",
+		text: text.data.text
+	};
+	const media = reportingMediaPartSchema.safeParse(value);
+	if (!media.success) return void 0;
+	return {
+		type: media.data.type,
+		...media.data.mimeType ? { mimeType: media.data.mimeType } : void 0
+	};
 }
-/** Read the latest Brief version for one Conversation. */
-async function readLatestConversationBrief(db, conversationId) {
-	const rows = await db.select().from(juniorConversationBriefs).where(eq(juniorConversationBriefs.conversationId, conversationId)).orderBy(desc(juniorConversationBriefs.version)).limit(1);
-	return rows[0] ? briefVersionFromRow(rows[0]) : void 0;
+/** Convert allowlisted Pi content parts into the reporting result value. */
+function modelVisibleToolOutput(content) {
+	const sanitized = content.map(sanitizeModelContentPart).filter((part) => part !== void 0);
+	if (sanitized.length === 0) return void 0;
+	if (sanitized.length !== 1) return sanitized;
+	const only = sanitized[0];
+	return only.type === "text" ? only.text : only;
 }
-//#endregion
-//#region src/chat/briefs/task.ts
-const BRIEF_LOCK_TTL_MS = 6e5;
-function hasUserInstruction(run) {
-	return run.transcript.some((entry) => entry.type === "message" && entry.role === "user" && entry.provenance?.authority === "instruction");
+function reportMessageActorIdentity(data) {
+	if (data.role !== "user") return void 0;
+	const author = reportingMessageAuthorSchema.safeParse(data.meta?.author);
+	if (!author.success) return void 0;
+	const actorIdentity = {
+		...author.data.fullName ? { fullName: author.data.fullName } : void 0,
+		...author.data.userId ? { slackUserId: author.data.userId } : void 0,
+		...author.data.userName ? { slackUserName: author.data.userName } : void 0
+	};
+	return Object.keys(actorIdentity).length > 0 ? actorIdentity : void 0;
 }
-function logSkip(context, conversationId, reason) {
-	context.log.info("Brief update skipped", {
-		conversationId,
-		reason
+/** Project native assistant tool calls through the existing reporting shape. */
+function reportToolCalls(args) {
+	const message = reportingAssistantMessageSchema.safeParse(args.message);
+	if (!message.success) return void 0;
+	const calls = message.data.content.flatMap((part) => {
+		const call = reportingToolCallPartSchema.safeParse(part);
+		if (!call.success) return [];
+		return [{
+			toolCallId: call.data.id,
+			name: call.data.name,
+			status: "running",
+			startedAt: new Date(args.createdAtMs).toISOString(),
+			startedSeq: args.seq,
+			...args.canExposePayload && call.data.arguments !== void 0 ? { input: call.data.arguments } : void 0
+		}];
 	});
+	return calls.length > 0 ? {
+		type: "tool_calls",
+		calls
+	} : void 0;
 }
-async function readTurnCompletedSeq(db, conversationId, turnId) {
-	const seq = (await db.select({ seq: juniorConversationEvents.seq }).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, conversationId), eq(juniorConversationEvents.type, "turn_completed"), sql`${juniorConversationEvents.payload}->>'turnId' = ${turnId}`)).orderBy(desc(juniorConversationEvents.seq)).limit(1))[0]?.seq;
-	if (seq === void 0) throw new Error(`Completed Turn ${turnId} has no terminal event in Conversation ${conversationId}`);
-	return seq;
-}
-async function emitBriefUpdated(context, stored) {
-	await context.events.emit(briefUpdatedEvent({
-		version: stored.version,
-		modelId: stored.modelId,
-		...stored.costUsd !== void 0 ? { costUsd: stored.costUsd } : void 0,
-		decisions: stored.content.decisions.length,
-		openDecisions: stored.content.openDecisions.length,
-		links: stored.content.links.length
-	}));
-}
-/** Generate and store the next Brief after one completed Turn. */
-async function updateConversationBrief(context) {
-	const run = await context.run.load();
-	if (run.source.kind !== "slack" && run.source.kind !== "web" && run.source.kind !== "local") {
-		logSkip(context, run.conversationId, "unsupported_source");
-		return;
-	}
-	const executor = getSqlExecutor();
-	const conversation = await createSqlStore(executor).get({ conversationId: run.conversationId });
-	if (conversation?.parentConversationId) {
-		logSkip(context, run.conversationId, "child_conversation");
-		return;
-	}
-	if (conversation?.transcriptPurgedAtMs !== void 0) {
-		if ((await resolveRootVisibility(executor, run.conversationId)).visibility !== "public") {
-			logSkip(context, run.conversationId, "purged_private");
-			return;
-		}
-	}
-	if (!hasUserInstruction(run)) {
-		logSkip(context, run.conversationId, "no_user_instruction");
-		return;
-	}
-	await context.state.withLock(`brief:${run.conversationId}`, BRIEF_LOCK_TTL_MS, async () => {
-		const db = context.db;
-		const existing = await readConversationBriefForTurn(db, run.conversationId, run.runId);
-		if (existing) {
-			await emitBriefUpdated(context, existing);
-			logSkip(context, run.conversationId, "turn_already_stored");
-			return;
-		}
-		const terminalSeq = await readTurnCompletedSeq(db, run.conversationId, run.runId);
-		const previous = await readLatestConversationBrief(db, run.conversationId);
-		if (previous && previous.throughSeq >= terminalSeq) {
-			logSkip(context, run.conversationId, "turn_already_covered");
-			return;
+/** Project assistant reasoning with tool ids retained only for display order. */
+function reportAssistantMessage(args) {
+	const message = reportingAssistantMessageSchema.safeParse(args.message);
+	if (!message.success) return void 0;
+	if (!message.data.content.some((part) => {
+		const reasoning = reportingReasoningPartSchema.safeParse(part);
+		return reasoning.success && reasoning.data.redacted !== true && reasoning.data.thinking.trim().length > 0;
+	})) return reportToolCalls(args) ?? {
+		type: "assistant_message",
+		parts: []
+	};
+	const reasoningParts = [];
+	const assistantParts = [];
+	for (const part of message.data.content) {
+		const reasoning = reportingReasoningPartSchema.safeParse(part);
+		if (reasoning.success) {
+			if (reasoning.data.redacted !== true && reasoning.data.thinking.trim().length > 0) {
+				const projected = {
+					type: "reasoning",
+					...args.canExposePayload ? { text: reasoning.data.thinking } : { redacted: true }
+				};
+				reasoningParts.push(projected);
+				assistantParts.push(projected);
+			}
+			continue;
 		}
-		const input = await briefInputFromSql(executor, run.conversationId, terminalSeq);
-		const modelId = defaultModelId(botConfig);
-		const generation = await generateBrief({
-			completeObject: (request) => completeObject({
-				...request,
-				modelId,
-				promptName: "junior.brief_update"
-			}),
-			input,
-			previous: previous?.content,
-			prompt: BRIEF_PROMPT,
-			throughIndex: terminalSeq
+		const call = reportingToolCallPartSchema.safeParse(part);
+		if (call.success) assistantParts.push({
+			type: "tool_call",
+			toolCallId: call.data.id
 		});
-		const stored = await appendConversationBrief(db, {
-			conversationId: run.conversationId,
-			turnId: run.runId,
-			throughSeq: terminalSeq,
-			content: generation.brief,
-			searchText: generation.searchText,
-			modelId,
-			...generation.costUsd !== void 0 ? { costUsd: generation.costUsd } : void 0
-		});
-		await emitBriefUpdated(context, stored.value);
-		if (!stored.inserted) logSkip(context, run.conversationId, "turn_already_stored");
-	});
-}
-/** Core task registration kept outside the installed plugin catalog. */
-const briefsTaskRegistration = {
-	manifest: {
-		name: "briefs",
-		displayName: "Briefs",
-		description: "Durable Conversation Brief generation"
-	},
-	conversationEvents: [briefUpdatedEvent],
-	hooks: { async operationalReport(context) {
-		return await buildBriefsOperationalReport({
-			briefDays: await context.eventStats.costsByDay({
-				days: 90,
-				eventName: "brief_updated"
-			}),
-			db: context.db,
-			nowMs: context.nowMs
-		});
-	} },
-	tasks: { updateBrief: { async run(context) {
-		await updateConversationBrief(context);
-	} } }
-};
-//#endregion
-//#region src/chat/plugins/conversation-events.ts
-function registeredDefinition(plugin, value) {
-	return plugin.conversationEvents?.find((definition) => definition === value.definition);
-}
-/** Keep operation idempotency stable when a registered event schema advances. */
-function eventIdentityVersion(plugin, definition) {
-	let version = definition.version;
-	for (const candidate of plugin.conversationEvents ?? []) if (candidate.eventName === definition.eventName) version = Math.min(version, candidate.version);
-	return version;
+	}
+	const toolCalls = reportToolCalls(args);
+	if (toolCalls?.type === "tool_calls") return {
+		...toolCalls,
+		assistant: { parts: assistantParts }
+	};
+	return reasoningParts.length > 0 ? {
+		type: "assistant_message",
+		parts: reasoningParts
+	} : void 0;
 }
-/** Create a conversation-bound writer for one plugin operation. */
-function createPluginConversationEvents(args) {
-	return { async emit(value) {
-		const definition = registeredDefinition(args.plugin, value);
-		if (!definition) throw new Error(`Plugin "${args.plugin.manifest.name}" cannot emit an unregistered conversation event.`);
-		const content = definition.parse(value.data);
-		const identityVersion = eventIdentityVersion(args.plugin, definition);
-		await getConversationEventStore().append(args.conversationId, [{
-			createdAtMs: Date.now(),
-			idempotencyKey: `plugin:${args.plugin.manifest.name}:operation:${args.operationId}:event:${definition.eventName}@${identityVersion}`,
-			data: {
-				type: "structured_event",
-				namespace: args.plugin.manifest.name,
-				name: definition.eventName,
-				version: definition.version,
-				turnId: args.turnId,
-				content
-			}
-		}], { activity: "preserve" });
-	} };
+/** Project a native tool result without exposing host-only result details. */
+function reportToolResult(args) {
+	const message = reportingToolResultMessageSchema.safeParse(args.message);
+	if (!message.success) return void 0;
+	const details = reportingToolResultDetailsSchema.safeParse(message.data.details);
+	const outcome = message.data.isError === true || details.success && (details.data.ok === false || details.data.status === "error") ? "error" : "completed";
+	const output = modelVisibleToolOutput(message.data.content);
+	const name = message.data.toolName ?? message.data.name ?? args.start?.name;
+	if (!name) return void 0;
+	return {
+		type: "tool_calls",
+		calls: [{
+			toolCallId: message.data.toolCallId,
+			name,
+			status: outcome,
+			...args.start ? {
+				startedAt: new Date(args.start.createdAtMs).toISOString(),
+				startedSeq: args.start.seq
+			} : void 0,
+			...args.canExposePayload && output !== void 0 ? { output } : void 0
+		}]
+	};
 }
-/** Render a stored plugin event through its currently registered definition. */
-function renderPluginConversationEvent(args) {
-	const definition = [briefsTaskRegistration, ...getPlugins()].find((candidate) => candidate.manifest.name === args.namespace)?.conversationEvents?.find((candidate) => candidate.eventName === args.name && candidate.version === args.version);
-	if (!definition) return void 0;
-	return definition.renderEvent(definition.parse(args.content));
+/** Return tool result ids that may need start metadata from outside a page. */
+function conversationReportToolResultIds(events) {
+	return [...new Set(events.flatMap((event) => {
+		const result = reportingToolResultMessageSchema.safeParse(event.data);
+		return result.success ? [result.data.toolCallId] : [];
+	}))];
 }
-//#endregion
-//#region src/api/conversations/membership.ts
-/** True when the viewer is a materialized participant on this root conversation. */
-function conversationHasParticipantUser(userId) {
-	const participant = getDb().select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).where(and(eq(juniorConversationParticipants.rootConversationId, juniorConversations.conversationId), eq(juniorConversationParticipants.userId, userId)));
-	return exists(participant);
+function reportEventData(args) {
+	const { data } = args;
+	if (data.type === "structured_event") {
+		if (!args.canExposePayload) return void 0;
+		const presentation = data.namespace === "junior" ? renderJuniorNativeConversationEvent(data) : renderPluginConversationEvent(data);
+		if (!presentation) return void 0;
+		return {
+			type: "structured_event",
+			namespace: data.namespace,
+			name: data.name,
+			version: data.version,
+			...data.turnId ? { turnId: data.turnId } : void 0,
+			presentation
+		};
+	}
+	switch (data.type) {
+		case "message": {
+			const actorIdentity = args.canExposePayload ? reportMessageActorIdentity(data) : void 0;
+			return {
+				type: "message",
+				messageId: data.messageId,
+				role: data.role,
+				...data.meta?.source === "web" || data.meta?.source === "slack" ? { source: data.meta.source } : void 0,
+				...actorIdentity ? { actorIdentity } : void 0,
+				eventObjectType: objectTypeSchema.safeParse(data.meta?.eventObjectType).data,
+				...typeof data.meta?.eventType === "string" ? { eventType: data.meta.eventType } : void 0,
+				...typeof data.meta?.explicitMention === "boolean" ? { explicitMention: data.meta.explicitMention } : void 0,
+				...args.canExposePayload && typeof data.meta?.trustedSummary === "string" ? { trustedSummary: data.meta.trustedSummary } : void 0,
+				...args.canExposePayload && (data.meta?.cards || data.meta?.objectCards) ? { cards: readMessageCardRefs(data.meta) } : void 0,
+				...args.canExposePayload ? {
+					text: data.text,
+					...data.meta?.attachments ? { attachments: readMessageAttachments(data.meta.attachments) } : void 0
+				} : { redacted: true }
+			};
+		}
+		case "message_handled": return {
+			type: "message_handled",
+			messageId: data.messageId
+		};
+		case "turn_started": return {
+			type: "turn_lifecycle",
+			turnId: data.turnId,
+			state: "started",
+			...data.inputMessageIds.length > 0 ? { inputMessageIds: data.inputMessageIds } : void 0
+		};
+		case "turn_context":
+			if (!args.canExposePayload) return;
+			return {
+				type: "turn_context",
+				turnId: data.turnId,
+				pluginName: data.pluginName,
+				kind: data.kind,
+				version: data.version,
+				content: data.content
+			};
+		case "attachments_delivered":
+			if (!args.canExposePayload) return;
+			return {
+				type: "attachments_delivered",
+				attachments: data.attachments
+			};
+		case "turn_routed": return {
+			type: "turn_routed",
+			turnId: data.turnId,
+			modelProfile: data.modelProfile,
+			modelId: data.modelId,
+			...data.costUsd !== void 0 ? { costUsd: data.costUsd } : void 0,
+			reasoningLevel: data.reasoningLevel,
+			...data.confidence !== void 0 ? { confidence: data.confidence } : void 0,
+			source: data.source
+		};
+		case "guardian_action_reviewed": return {
+			type: "guardian_action_reviewed",
+			turnId: data.turnId,
+			toolCallId: data.toolCallId,
+			toolName: data.toolName,
+			decision: data.decision,
+			riskLevel: data.riskLevel,
+			userAuthorization: data.userAuthorization
+		};
+		case "turn_completed": return {
+			type: "turn_lifecycle",
+			turnId: data.turnId,
+			state: data.outcome === "success" ? "succeeded" : "no_reply"
+		};
+		case "turn_failed": {
+			const eventId = data.eventId;
+			const sentryEventUrl = eventId ? buildSentryEventUrl(eventId) : void 0;
+			return {
+				type: "turn_lifecycle",
+				turnId: data.turnId,
+				state: "failed",
+				failureCode: data.failureCode,
+				...data.failureReason ? { failureReason: data.failureReason } : void 0,
+				...eventId ? { eventId } : void 0,
+				...sentryEventUrl ? { sentryEventUrl } : void 0
+			};
+		}
+		case "compaction": return {
+			type: "compaction",
+			modelProfile: data.modelProfile,
+			modelId: data.modelId,
+			...args.canExposePayload && data.summary ? { summary: data.summary } : void 0,
+			...data.details ? { details: data.details } : void 0
+		};
+		default: return;
+	}
 }
 /**
-* True when a verified primary-email user participates on this root
-* conversation. Used only for the actorEmail feed fallback.
+* Project canonical events into the ordered reporting boundary.
+*
+* `canExposePayload` must come from the authorized conversation-detail policy;
+* this projection never derives visibility or authorization from event data.
 */
-function conversationHasParticipantEmail(email) {
-	const participant = getDb().select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).innerJoin(juniorUsers, eq(juniorUsers.id, juniorConversationParticipants.userId)).where(and(eq(juniorConversationParticipants.rootConversationId, juniorConversations.conversationId), eq(juniorUsers.primaryEmailNormalized, email)));
-	return exists(participant);
-}
-/** True when one user's personal feed has archived this root after the cutoff. */
-function conversationArchivedForUser(userId, archivedAfter) {
-	const archive = getDb().select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).where(and(eq(juniorConversationParticipants.rootConversationId, juniorConversations.conversationId), eq(juniorConversationParticipants.userId, userId), isNotNull(juniorConversationParticipants.archivedAt), archivedAfter ? gte(juniorConversationParticipants.archivedAt, archivedAfter) : void 0));
-	return exists(archive);
-}
-/** True when one user's personal feed has not archived this root. */
-function conversationNotArchivedForUser(userId) {
-	const archive = getDb().select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).where(and(eq(juniorConversationParticipants.rootConversationId, juniorConversations.conversationId), eq(juniorConversationParticipants.userId, userId), isNotNull(juniorConversationParticipants.archivedAt)));
-	return notExists(archive);
-}
-/** True when one primary-email user's feed archived this root after the cutoff. */
-function conversationArchivedForEmail(email, archivedAfter) {
-	const archive = getDb().select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).innerJoin(juniorUsers, eq(juniorUsers.id, juniorConversationParticipants.userId)).where(and(eq(juniorConversationParticipants.rootConversationId, juniorConversations.conversationId), eq(juniorUsers.primaryEmailNormalized, email), isNotNull(juniorConversationParticipants.archivedAt), archivedAfter ? gte(juniorConversationParticipants.archivedAt, archivedAfter) : void 0));
-	return exists(archive);
-}
-/** True when one primary-email user's personal feed has not archived this root. */
-function conversationNotArchivedForEmail(email) {
-	const archive = getDb().select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).innerJoin(juniorUsers, eq(juniorUsers.id, juniorConversationParticipants.userId)).where(and(eq(juniorConversationParticipants.rootConversationId, juniorConversations.conversationId), eq(juniorUsers.primaryEmailNormalized, email), isNotNull(juniorConversationParticipants.archivedAt)));
-	return notExists(archive);
-}
-/** Root-actor ownership or a materialized participant row for the same person. */
-function viewerConversationMembership(args) {
-	if (args.actorMatch && args.participantMatch) return or(args.actorMatch, args.participantMatch);
-	return args.actorMatch ?? args.participantMatch;
-}
-/** Read personal archive timestamps for a bounded set of conversation roots. */
-async function conversationArchiveTimes(db, conversationIds, subject) {
-	if (!subject || conversationIds.length === 0) return /* @__PURE__ */ new Map();
-	const query = db.select({
-		archivedAt: juniorConversationParticipants.archivedAt,
-		rootConversationId: juniorConversationParticipants.rootConversationId
-	}).from(juniorConversationParticipants);
-	const rows = "userId" in subject ? await query.where(and(eq(juniorConversationParticipants.userId, subject.userId), inArray(juniorConversationParticipants.rootConversationId, [...conversationIds]), isNotNull(juniorConversationParticipants.archivedAt))) : await query.innerJoin(juniorUsers, eq(juniorUsers.id, juniorConversationParticipants.userId)).where(and(eq(juniorUsers.primaryEmailNormalized, subject.email), inArray(juniorConversationParticipants.rootConversationId, [...conversationIds]), isNotNull(juniorConversationParticipants.archivedAt)));
-	return new Map(rows.flatMap((row) => row.archivedAt ? [[row.rootConversationId, row.archivedAt.getTime()]] : []));
-}
-/** Find which of the supplied roots include the linked viewer as a participant. */
-async function conversationIdsWithParticipantUser(db, conversationIds, userId) {
-	if (conversationIds.length === 0) return /* @__PURE__ */ new Set();
-	const rows = await db.select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).where(and(eq(juniorConversationParticipants.userId, userId), inArray(juniorConversationParticipants.rootConversationId, [...conversationIds])));
-	return new Set(rows.map((row) => row.rootConversationId));
-}
-//#endregion
-//#region src/api/conversations/access.ts
-const rootConversation = alias(juniorConversations, "access_root_conversation");
-const rootDestination = alias(juniorDestinations, "access_root_destination");
-const rootIdentity = alias(juniorIdentities, "access_root_identity");
-/** Resolve viewer access for a bounded set of persisted conversations. */
-async function readConversationAccessFromSql(db, conversationIds, viewer) {
-	if (conversationIds.length === 0) return /* @__PURE__ */ new Map();
-	const normalizedViewerEmail = viewer?.email.trim().toLowerCase() || void 0;
-	const rows = await db.select({
-		conversationId: juniorConversations.conversationId,
-		parentConversationId: juniorConversations.parentConversationId,
-		storedRootConversationId: juniorConversations.rootConversationId,
-		rootConversationId: rootConversation.conversationId,
-		rootParentConversationId: rootConversation.parentConversationId,
-		rootRootConversationId: rootConversation.rootConversationId,
-		visibility: rootDestination.visibility,
-		rootEmailNormalized: rootIdentity.emailNormalized,
-		rootEmailVerified: rootIdentity.emailVerified,
-		rootUserId: rootIdentity.userId
-	}).from(juniorConversations).leftJoin(rootConversation, eq(rootConversation.conversationId, juniorConversations.rootConversationId)).leftJoin(rootDestination, eq(rootDestination.id, rootConversation.destinationId)).leftJoin(rootIdentity, eq(rootIdentity.id, rootConversation.actorIdentityId)).where(inArray(juniorConversations.conversationId, [...conversationIds]));
-	const membershipConversationIds = /* @__PURE__ */ new Set();
-	for (const row of rows) {
-		membershipConversationIds.add(row.conversationId);
-		if (row.storedRootConversationId) membershipConversationIds.add(row.storedRootConversationId);
+function projectConversationReportEventPage(args) {
+	const subagentStarts = /* @__PURE__ */ new Map();
+	for (const event of args.subagentStartEvents ?? []) if (event.data.type === "subagent_started") subagentStarts.set(event.data.subagentInvocationId, {
+		createdAtMs: event.createdAtMs,
+		data: event.data,
+		seq: event.seq
+	});
+	const toolStarts = /* @__PURE__ */ new Map();
+	for (const event of args.toolStartEvents ?? []) if (event.data.type === "tool_execution_started") {
+		const current = toolStarts.get(event.data.toolCallId);
+		if (!current || event.seq < current.seq) toolStarts.set(event.data.toolCallId, {
+			createdAtMs: event.createdAtMs,
+			name: event.data.toolName,
+			seq: event.seq
+		});
 	}
-	const participantRootIds = viewer !== void 0 ? await conversationIdsWithParticipantUser(db, [...membershipConversationIds], viewer.id) : /* @__PURE__ */ new Set();
-	return new Map(rows.map((row) => {
-		const validRootConversationId = row.rootConversationId !== null && row.rootConversationId === row.storedRootConversationId && row.rootRootConversationId === row.rootConversationId && row.rootParentConversationId === null && (row.parentConversationId !== null || row.storedRootConversationId === row.conversationId) ? row.rootConversationId ?? void 0 : void 0;
-		const visibility = validRootConversationId === void 0 ? null : row.visibility;
-		const isRootActor = validRootConversationId !== void 0 && viewer !== void 0 && (row.rootUserId === viewer.id || normalizedViewerEmail !== void 0 && row.rootEmailVerified === true && row.rootEmailNormalized === normalizedViewerEmail);
-		const isMaterializedParticipant = participantRootIds.has(row.conversationId) || validRootConversationId !== void 0 && participantRootIds.has(validRootConversationId);
-		const isParticipant = isRootActor || isMaterializedParticipant;
-		const canViewPrivateContent = isParticipant || validRootConversationId !== void 0 && canExposeConversationPayload({ visibility: visibility ?? void 0 });
-		return [row.conversationId, {
-			canViewPrivateContent,
-			isParticipant,
-			visibility
-		}];
-	}));
-}
-//#endregion
-//#region src/chat/plugins/conversation-event-reader.ts
-function registeredEventName$1(plugin, eventName) {
-	if (!plugin.conversationEvents?.some((definition) => definition.eventName === eventName)) throw new TypeError(`Plugin "${plugin.manifest.name}" did not register event "${eventName}"`);
-	return eventName;
-}
-/** Create Conversation event reads bound to one plugin namespace. */
-function createPluginConversationEventReader(plugin) {
-	return { async list(input) {
-		const eventName = registeredEventName$1(plugin, input.eventName);
-		const db = getDb();
-		if (!(await readConversationAccessFromSql(db, [input.conversationId], input.viewer)).get(input.conversationId)?.canViewPrivateContent) return void 0;
-		return (await db.select({
-			content: sql`${juniorConversationEvents.payload}->'content'`,
-			createdAt: juniorConversationEvents.createdAt,
-			version: sql`(${juniorConversationEvents.payload}->>'version')::integer`
-		}).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, input.conversationId), eq(juniorConversationEvents.type, "structured_event"), sql`${juniorConversationEvents.payload}->>'namespace' = ${plugin.manifest.name}`, sql`${juniorConversationEvents.payload}->>'name' = ${eventName}`)).orderBy(desc(juniorConversationEvents.seq))).map((row) => ({
-			content: row.content,
-			createdAt: row.createdAt.toISOString(),
-			version: row.version
+	const projected = [];
+	let model;
+	for (const event of args.modelContextEvents ?? []) {
+		model = conversationEventModel(event.data, model);
+		if (event.data.type === "turn_completed" || event.data.type === "turn_failed") model = void 0;
+	}
+	for (const event of args.events) {
+		model = conversationEventModel(event.data, model);
+		const eventModel = model;
+		const modelCall = conversationEventModelCall(event.data);
+		if (event.data.type === "turn_completed" || event.data.type === "turn_failed") model = void 0;
+		let data;
+		if (event.data.type === "assistant_message" || event.data.type === "tool_result") {
+			const reportArgs = {
+				canExposePayload: args.canExposePayload,
+				createdAtMs: event.createdAtMs,
+				message: event.data,
+				seq: event.seq
+			};
+			const result = reportingToolResultMessageSchema.safeParse(event.data);
+			const start = result.success ? toolStarts.get(result.data.toolCallId) : void 0;
+			data = reportAssistantMessage(reportArgs) ?? reportToolResult({
+				canExposePayload: args.canExposePayload,
+				message: event.data,
+				...start && start.seq < event.seq ? { start } : void 0
+			});
+		} else if (event.data.type === "tool_execution_started") {
+			toolStarts.set(event.data.toolCallId, {
+				createdAtMs: event.createdAtMs,
+				name: event.data.toolName,
+				seq: event.seq
+			});
+			data = {
+				type: "tool_calls",
+				calls: [{
+					toolCallId: event.data.toolCallId,
+					name: event.data.toolName,
+					status: "running",
+					startedAt: new Date(event.createdAtMs).toISOString(),
+					startedSeq: event.seq
+				}]
+			};
+		} else if (event.data.type === "subagent_started") {
+			subagentStarts.set(event.data.subagentInvocationId, {
+				createdAtMs: event.createdAtMs,
+				data: event.data,
+				seq: event.seq
+			});
+			data = {
+				type: "subagent",
+				startedSeq: event.seq,
+				startedAt: new Date(event.createdAtMs).toISOString(),
+				childConversationId: event.data.childConversationId,
+				subagentKind: event.data.subagentKind,
+				status: "running",
+				...event.data.parentToolCallId ? { parentToolCallId: event.data.parentToolCallId } : void 0
+			};
+		} else if (event.data.type === "subagent_ended") {
+			const started = subagentStarts.get(event.data.subagentInvocationId);
+			if (started && started.seq < event.seq) {
+				data = {
+					type: "subagent",
+					startedSeq: started.seq,
+					startedAt: new Date(started.createdAtMs).toISOString(),
+					childConversationId: started.data.childConversationId,
+					subagentKind: started.data.subagentKind,
+					...started.data.parentToolCallId ? { parentToolCallId: started.data.parentToolCallId } : void 0,
+					status: event.data.outcome === "success" ? "completed" : event.data.outcome
+				};
+				subagentStarts.delete(event.data.subagentInvocationId);
+			}
+		} else if (event.data.type === "handoff") data = {
+			type: "handoff",
+			modelProfile: event.data.modelProfile,
+			modelId: event.data.modelId,
+			...event.data.reasoningLevel ? { reasoningLevel: event.data.reasoningLevel } : void 0,
+			...event.data.triggeringToolCallId ? { triggeringToolCallId: event.data.triggeringToolCallId } : void 0,
+			...args.canExposePayload && event.data.summary ? { summary: event.data.summary } : void 0
+		};
+		else data = reportEventData({
+			canExposePayload: args.canExposePayload,
+			data: event.data
+		});
+		if (!data) continue;
+		projected.push(conversationReportEventSchema.parse({
+			seq: event.seq,
+			createdAt: new Date(event.createdAtMs).toISOString(),
+			data,
+			...eventModel ? { model: eventModel } : void 0,
+			...modelCall ? { modelCall } : void 0
 		}));
-	} };
+	}
+	return projected;
 }
 //#endregion
-//#region src/chat/plugins/conversation-event-stats.ts
-const DAY_MS = 864e5;
-const costRowSchema = z.object({
-	costUsd: z.number().finite().nonnegative(),
-	date: z.string().regex(/^\d{4}-\d{2}-\d{2}(T\d{2})?$/),
-	events: z.number().int().nonnegative()
-}).strict();
-function startOfUtcDay(value) {
-	const date = new Date(value);
-	date.setUTCHours(0, 0, 0, 0);
-	return date;
+//#region src/api/conversations/event-page.ts
+const conversationEventColumns = getTableColumns(juniorConversationEvents);
+const MIN_SCAN_SIZE = 64;
+/** Read bounded canonical rows while excluding model-only replacement history. */
+async function readConversationEventRows(executor, args) {
+	return executor.db().select({
+		...conversationEventColumns,
+		payload: sql`case
+        when ${juniorConversationEvents.type} in ('compaction', 'handoff')
+        then jsonb_set(
+          ${juniorConversationEvents.payload},
+          '{replacementHistory}',
+          '[]'::jsonb
+        )
+        else ${juniorConversationEvents.payload}
+      end`
+	}).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, args.conversationId), args.beforeSeq === void 0 ? void 0 : lt(juniorConversationEvents.seq, args.beforeSeq), inArray(juniorConversationEvents.type, args.types ?? [...conversationReportSourceEventTypes]), args.subagentInvocationIds === void 0 ? void 0 : inArray(sql`${juniorConversationEvents.payload}->>'subagentInvocationId'`, args.subagentInvocationIds), args.toolCallIds === void 0 ? void 0 : inArray(sql`${juniorConversationEvents.payload}->>'toolCallId'`, args.toolCallIds))).orderBy(args.direction === "forward" ? asc(juniorConversationEvents.seq) : desc(juniorConversationEvents.seq)).limit(args.limit);
 }
-function registeredEventName(plugin, eventName) {
-	if (!plugin.conversationEvents?.some((definition) => definition.eventName === eventName)) throw new TypeError(`Plugin "${plugin.manifest.name}" did not register event "${eventName}"`);
-	return eventName;
+function decodeConversationEventRow(row) {
+	return decodeStoredConversationEvent({
+		schemaVersion: row.schemaVersion,
+		seq: row.seq,
+		historyVersion: row.historyVersion,
+		...row.idempotencyKey ? { idempotencyKey: row.idempotencyKey } : void 0,
+		createdAtMs: row.createdAt.getTime(),
+		type: row.type,
+		payload: row.payload
+	});
 }
-/** Create aggregate event-cost reads bound to one plugin's registered namespace. */
-function createPluginConversationEventStats(plugin, now = Date.now) {
-	return {
-		async costsByHour(input) {
-			const eventName = registeredEventName(plugin, input.eventName);
-			const hourCount = input.hours ?? 24;
-			const end = new Date(now());
-			end.setUTCMinutes(0, 0, 0);
-			const start = /* @__PURE__ */ new Date(end.getTime() - (hourCount - 1) * 60 * 60 * 1e3);
-			const endExclusive = new Date(end.getTime() + 36e5);
-			const date = sql`TO_CHAR(
-        ${juniorConversationEvents.createdAt} AT TIME ZONE 'UTC',
-        'YYYY-MM-DD"T"HH24'
-      )`;
-			const cost = sql`CASE
-        WHEN jsonb_typeof(${juniorConversationEvents.payload}->'content'->'costUsd') = 'number'
-          THEN (${juniorConversationEvents.payload}->'content'->>'costUsd')::double precision
-        ELSE 0
-      END`;
-			const rows = await getDb().select({
-				costUsd: sql`SUM(${cost})::double precision`.mapWith(Number),
-				date,
-				events: sql`COUNT(*)::integer`.mapWith(Number)
-			}).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.type, "structured_event"), sql`${juniorConversationEvents.payload}->>'namespace' = ${plugin.manifest.name}`, sql`${juniorConversationEvents.payload}->>'name' = ${eventName}`, gte(juniorConversationEvents.createdAt, start), lt(juniorConversationEvents.createdAt, endExclusive))).groupBy(date);
-			const byHour = new Map(z.array(costRowSchema).parse(rows).map((row) => [row.date, row]));
-			return Array.from({ length: hourCount }, (_, index) => {
-				const key = new Date(start.getTime() + index * 60 * 60 * 1e3).toISOString().slice(0, 13);
-				return byHour.get(key) ?? {
-					costUsd: 0,
-					date: key,
-					events: 0
-				};
-			});
-		},
-		async costsByDay(input) {
-			const eventName = registeredEventName(plugin, input.eventName);
-			const end = startOfUtcDay(now());
-			const start = /* @__PURE__ */ new Date(end.getTime() - (input.days - 1) * DAY_MS);
-			const endExclusive = new Date(end.getTime() + DAY_MS);
-			const date = sql`TO_CHAR(
-        ${juniorConversationEvents.createdAt} AT TIME ZONE 'UTC',
-        'YYYY-MM-DD'
-      )`;
-			const cost = sql`CASE
-        WHEN jsonb_typeof(${juniorConversationEvents.payload}->'content'->'costUsd') = 'number'
-          THEN (${juniorConversationEvents.payload}->'content'->>'costUsd')::double precision
-        ELSE 0
-      END`;
-			const rows = await getDb().select({
-				costUsd: sql`SUM(${cost})::double precision`.mapWith(Number),
-				date,
-				events: sql`COUNT(*)::integer`.mapWith(Number)
-			}).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.type, "structured_event"), sql`${juniorConversationEvents.payload}->>'namespace' = ${plugin.manifest.name}`, sql`${juniorConversationEvents.payload}->>'name' = ${eventName}`, gte(juniorConversationEvents.createdAt, start), lt(juniorConversationEvents.createdAt, endExclusive))).groupBy(date);
-			const byDate = new Map(z.array(costRowSchema).parse(rows).map((row) => [row.date, row]));
-			return Array.from({ length: input.days }, (_, index) => {
-				const date = new Date(start.getTime() + index * DAY_MS).toISOString().slice(0, 10);
-				return byDate.get(date) ?? {
-					costUsd: 0,
-					date,
-					events: 0
-				};
-			});
-		}
-	};
+/** Project stored rows and resolve entity starts that precede the page. */
+async function projectConversationEventRows(executor, args) {
+	const events = args.rows.map(decodeConversationEventRow).sort((left, right) => left.seq - right.seq);
+	const modelContextRows = events[0] ? (await Promise.all([readConversationEventRows(executor, {
+		conversationId: args.conversationId,
+		beforeSeq: events[0].seq,
+		direction: "backward",
+		limit: 1,
+		types: [
+			"turn_started",
+			"turn_routed",
+			"handoff",
+			"turn_completed",
+			"turn_failed"
+		]
+	}), readConversationEventRows(executor, {
+		conversationId: args.conversationId,
+		beforeSeq: events[0].seq,
+		direction: "backward",
+		limit: 1,
+		types: ["assistant_message"]
+	})])).flat().sort((left, right) => left.seq - right.seq) : [];
+	const endedInvocationIds = [...new Set(events.flatMap((event) => event.data.type === "subagent_ended" ? [event.data.subagentInvocationId] : []))];
+	const subagentStartRows = endedInvocationIds.length === 0 ? [] : await readConversationEventRows(executor, {
+		conversationId: args.conversationId,
+		direction: "forward",
+		limit: endedInvocationIds.length,
+		subagentInvocationIds: endedInvocationIds,
+		types: ["subagent_started"]
+	});
+	const toolResultIds = conversationReportToolResultIds(events);
+	const toolStartRows = toolResultIds.length === 0 ? [] : await readConversationEventRows(executor, {
+		conversationId: args.conversationId,
+		direction: "forward",
+		limit: toolResultIds.length,
+		toolCallIds: toolResultIds,
+		types: ["tool_execution_started"]
+	});
+	if (args.canExposePayload) await hydrateMessageAttachments(executor, args.conversationId, events);
+	return projectConversationReportEventPage({
+		canExposePayload: args.canExposePayload,
+		events,
+		subagentStartEvents: subagentStartRows.map(decodeConversationEventRow),
+		toolStartEvents: toolStartRows.map(decodeConversationEventRow),
+		modelContextEvents: modelContextRows.map(decodeConversationEventRow)
+	});
 }
-//#endregion
-//#region src/chat/plugins/logging.ts
-/** Create the host logger exposed to plugin hooks. */
-function createPluginLogger(plugin) {
+/**
+* Read the latest reporting events before an exclusive boundary.
+*
+* Source rows are scanned in bounded chunks until the requested projected page
+* and one older event are known. This keeps ordinary pages bounded without
+* assuming every agent history event produces a reporting event.
+*/
+async function readConversationEventPage(executor, args) {
+	const scanSize = Math.max(args.limit + 1, MIN_SCAN_SIZE);
+	const rows = [];
+	let beforeSeq = args.beforeSeq;
+	let projected = [];
+	while (projected.length <= args.limit) {
+		const batch = await readConversationEventRows(executor, {
+			beforeSeq,
+			conversationId: args.conversationId,
+			direction: "backward",
+			limit: scanSize
+		});
+		if (batch.length === 0) break;
+		rows.push(...batch);
+		projected = await projectConversationEventRows(executor, {
+			canExposePayload: args.canExposePayload,
+			conversationId: args.conversationId,
+			rows
+		});
+		if (projected.length > args.limit || batch.length < scanSize) break;
+		beforeSeq = batch.at(-1).seq;
+	}
+	const events = projected.slice(-args.limit);
 	return {
-		info(message, metadata) {
-			logInfo("plugin.log.info", {
-				"app.log.message": message,
-				"app.plugin.name": plugin,
-				...metadata
-			});
-		},
-		warn(message, metadata) {
-			logWarn("plugin.log.warn", {
-				"app.log.message": message,
-				"app.plugin.name": plugin,
-				...metadata
-			});
-		},
-		error(message, metadata) {
-			logException(new Error(message), "plugin.log.error", {
-				"app.plugin.name": plugin,
-				...metadata
-			});
-		}
+		events,
+		...projected.length > events.length && events[0] ? { previousSeq: events[0].seq } : void 0
 	};
 }
 //#endregion
-//#region src/chat/plugins/model.ts
-/** Create the host-owned structured model capability exposed to plugins. */
-function createPluginModel(pluginName, options = {}, runtime = {}) {
-	return { async completeObject(input) {
-		const modelId = options.structuredModelId ?? (options.structuredModel === "default" ? defaultModelId(botConfig) : botConfig.fastModelId);
-		const result = await completeObject({
-			modelId,
-			schema: input.schema,
-			prompt: input.prompt,
-			...input.system !== void 0 ? { system: input.system } : void 0,
-			...input.maxTokens !== void 0 ? { maxTokens: input.maxTokens } : void 0,
-			signal: runtime.signal,
-			promptName: `${pluginName}.structured_completion`,
-			metadata: {
-				pluginName,
-				pluginModelRole: "structured"
-			}
+//#region src/chat/briefs/input.ts
+const EVENT_PAGE_SIZE = 500;
+async function readReportEventsThrough(executor, conversationId, throughSeq) {
+	const pages = [];
+	let beforeSeq = throughSeq + 1;
+	do {
+		const page = await readConversationEventPage(executor, {
+			beforeSeq,
+			canExposePayload: true,
+			conversationId,
+			limit: EVENT_PAGE_SIZE
 		});
-		return {
-			object: result.object,
-			...result.costUsd !== void 0 ? { costUsd: result.costUsd } : void 0
-		};
-	} };
+		pages.unshift(page.events);
+		beforeSeq = page.previousSeq;
+	} while (beforeSeq !== void 0);
+	const bySequence = /* @__PURE__ */ new Map();
+	for (const event of pages.flat()) bySequence.set(event.seq, event);
+	return [...bySequence.values()].sort((left, right) => left.seq - right.seq);
 }
-/** Create the host-owned embedding capability exposed to prompt hooks. */
-function createPluginEmbedder(pluginName, runtime = {}) {
-	return { async embedTexts(input) {
-		return await embedTexts({
-			modelId: botConfig.embeddingModelId,
-			texts: input.texts,
-			signal: runtime.signal,
-			metadata: {
-				pluginName,
-				pluginModelRole: "embedding"
-			}
-		});
-	} };
+/**
+* Build generator input from SQL through one durable event. The caller owns
+* the boundary, so a Turn that completes during the read cannot be covered by
+* a Brief that never saw it.
+*/
+async function briefInputFromSql(executor, conversationId, throughSeq) {
+	const db = executor.db();
+	const conversation = await createSqlStore(executor).get({ conversationId });
+	if (!conversation) throw new Error(`Conversation ${conversationId} is unavailable`);
+	const [events, annotations, codeChanges] = await Promise.all([
+		readReportEventsThrough(executor, conversationId, throughSeq),
+		listConversationAnnotations(db, conversationId),
+		db.select({
+			closedAt: juniorCodeChanges.closedAt,
+			mergedAt: juniorCodeChanges.mergedAt,
+			number: juniorCodeChanges.number,
+			openedAt: juniorCodeChanges.openedAt,
+			repository: juniorCodeRepositories.name,
+			state: juniorCodeChanges.state,
+			title: juniorCodeChanges.title,
+			url: juniorCodeChanges.url
+		}).from(juniorCodeChanges).innerJoin(juniorCodeRepositories, eq(juniorCodeRepositories.id, juniorCodeChanges.repositoryId)).where(and(arrayContains(juniorCodeChanges.conversationIds, [conversationId]), isNotNull(juniorCodeChanges.url)))
+	]);
+	const location = conversation.location;
+	return parseBriefInput({
+		conversationId,
+		...conversation.title ? { title: conversation.title } : void 0,
+		visibility: conversation.visibility ?? "private",
+		...location ? { location: {
+			provider: location.provider,
+			...conversation.channelName ? { channelName: conversation.channelName } : void 0
+		} } : void 0,
+		entries: briefEntriesFromReportEvents(events),
+		codeChanges: codeChanges.map((change) => ({
+			repository: change.repository,
+			number: change.number,
+			...change.title ? { title: change.title } : void 0,
+			url: change.url,
+			state: change.state,
+			openedAt: change.openedAt.toISOString(),
+			...change.mergedAt ? { mergedAt: change.mergedAt.toISOString() } : void 0,
+			...change.closedAt ? { closedAt: change.closedAt.toISOString() } : void 0
+		})),
+		resources: annotations.map((annotation) => ({
+			label: annotation.label,
+			url: annotation.url,
+			...annotation.status ? { status: annotation.status } : void 0
+		}))
+	});
 }
 //#endregion
-//#region src/chat/plugins/state.ts
-const MAX_PLUGIN_STATE_KEY_LENGTH = 512;
-function hashKeyPart(value) {
-	return createHash("sha256").update(value).digest("hex").slice(0, 32);
+//#region src/chat/briefs/operational-report.ts
+const DAY_MS$1 = 864e5;
+const WINDOWS = [
+	7,
+	30,
+	90
+];
+function startOfUtcDay$1(value) {
+	const date = new Date(value);
+	date.setUTCHours(0, 0, 0, 0);
+	return date;
 }
-function pluginStateKey(plugin, key) {
-	const pluginPrefix = `junior:${plugin}`;
-	if (key === pluginPrefix || key.startsWith(`${pluginPrefix}:`)) return key;
-	return `junior:plugin_state:${hashKeyPart(plugin)}:${hashKeyPart(key)}`;
+function formatCount(value) {
+	return new Intl.NumberFormat("en-US").format(value);
 }
-function validatePluginStateKey(key) {
-	if (!key.trim()) throw new Error("Plugin state key is required");
-	if (key.length > MAX_PLUGIN_STATE_KEY_LENGTH) throw new Error("Plugin state key exceeds the maximum length");
+function formatUsd(value) {
+	const maximumFractionDigits = value > 0 && value < .01 ? 4 : 2;
+	return new Intl.NumberFormat("en-US", {
+		currency: "USD",
+		maximumFractionDigits,
+		minimumFractionDigits: 2,
+		style: "currency"
+	}).format(value);
 }
-/** Create a durable state namespace scoped to one plugin. */
-function createPluginState(plugin, adapter) {
-	const getAdapter = () => adapter ?? getStateAdapter();
+/**
+* Build Brief storage and model-cost diagnostics for the System page. Cost
+* comes from retained Conversation events, so spend on purged private
+* Conversations leaves the report with them; the labels say so.
+*/
+async function buildBriefsOperationalReport(args) {
+	const newestDay = startOfUtcDay$1(args.nowMs);
+	const windowStart = /* @__PURE__ */ new Date(newestDay.getTime() - 29 * DAY_MS$1);
+	const windowEnd = new Date(newestDay.getTime() + DAY_MS$1);
+	const [[counts], recentCounts] = await Promise.all([args.db.select({
+		conversations: sql`count(distinct ${juniorConversationBriefs.conversationId})`.mapWith(Number),
+		stored: sql`count(*)`.mapWith(Number)
+	}).from(juniorConversationBriefs), args.db.select({ stored: sql`count(*)`.mapWith(Number) }).from(juniorConversationBriefs).where(and(gte(juniorConversationBriefs.createdAt, windowStart), lt(juniorConversationBriefs.createdAt, windowEnd)))]);
+	const recentDays = args.briefDays.filter((day) => {
+		const dayStart = Date.parse(`${day.date}T00:00:00.000Z`);
+		return dayStart >= windowStart.getTime() && dayStart < windowEnd.getTime();
+	});
+	const recentCost = recentDays.reduce((total, day) => total + day.costUsd, 0);
+	const recentBriefs = recentDays.reduce((total, day) => total + day.events, 0);
 	return {
-		async delete(key) {
-			validatePluginStateKey(key);
-			const state = getAdapter();
-			await state.connect();
-			await state.delete(pluginStateKey(plugin, key));
-		},
-		async get(key) {
-			validatePluginStateKey(key);
-			const state = getAdapter();
-			await state.connect();
-			return await state.get(pluginStateKey(plugin, key)) ?? void 0;
-		},
-		async set(key, value, ttlMs) {
-			validatePluginStateKey(key);
-			const state = getAdapter();
-			await state.connect();
-			await state.set(pluginStateKey(plugin, key), value, ttlMs);
-		},
-		async setIfNotExists(key, value, ttlMs) {
-			validatePluginStateKey(key);
-			const state = getAdapter();
-			await state.connect();
-			return await state.setIfNotExists(pluginStateKey(plugin, key), value, ttlMs);
-		},
-		async withLock(key, ttlMs, callback) {
-			validatePluginStateKey(key);
-			const state = getAdapter();
-			await state.connect();
-			const lockKey = pluginStateKey(plugin, key);
-			const lock = await state.acquireLock(lockKey, ttlMs);
-			if (!lock) throw new Error(`Could not acquire plugin state lock for ${key}`);
-			try {
-				return await callback();
-			} finally {
-				await state.releaseLock(lock);
+		generatedAt: new Date(args.nowMs).toISOString(),
+		title: "Briefs",
+		metrics: [
+			{
+				label: "briefs stored",
+				tone: counts?.stored ? "good" : "neutral",
+				value: formatCount(counts?.stored ?? 0)
+			},
+			{
+				label: "conversations with a brief",
+				value: formatCount(counts?.conversations ?? 0)
+			},
+			{
+				label: "briefs · 30d",
+				value: formatCount(recentCounts[0]?.stored ?? 0)
+			},
+			{
+				label: "cost · 30d · retained",
+				value: formatUsd(recentCost)
+			},
+			{
+				label: "average cost per brief · 30d · retained",
+				value: formatUsd(recentBriefs === 0 ? 0 : recentCost / recentBriefs)
 			}
-		}
+		],
+		widgets: [{
+			categories: args.briefDays.map((day) => ({
+				id: day.date,
+				label: day.date,
+				values: {
+					briefs: day.events,
+					costUsd: day.costUsd
+				}
+			})),
+			description: "Stored Brief versions and estimated model cost",
+			id: "briefs-created",
+			series: [{
+				key: "briefs",
+				label: "Briefs"
+			}, {
+				format: "usd",
+				key: "costUsd",
+				label: "Cost"
+			}],
+			timeRangeDays: [...WINDOWS],
+			title: "Briefs created",
+			type: "bar_chart"
+		}]
 	};
 }
 //#endregion
-//#region src/chat/dashboard-link.ts
-let dashboardConversationLinkOptions;
-function withHttps(host) {
-	return /^https?:\/\//.test(host) ? host : `https://${host}`;
-}
-function stripTrailingSlashes(value) {
-	let end = value.length;
-	while (end > 1 && value.charCodeAt(end - 1) === 47) end -= 1;
-	return end === value.length ? value : value.slice(0, end);
+//#region src/chat/briefs/store.ts
+function briefVersionFromRow(row) {
+	return {
+		conversationId: row.conversationId,
+		version: row.version,
+		turnId: row.turnId,
+		throughSeq: row.throughSeq,
+		content: conversationBriefSchema.parse(row.content),
+		searchText: row.searchText,
+		modelId: row.modelId,
+		...row.costUsd !== null ? { costUsd: row.costUsd } : void 0,
+		createdAt: row.createdAt
+	};
 }
-function normalizeDashboardPath(path, fallback) {
-	const value = path?.trim() || fallback;
-	return stripTrailingSlashes(value.startsWith("/") ? value : `/${value}`);
+/** Append the next Brief version, or return the row for an existing Turn. */
+async function appendConversationBrief(db, input) {
+	return await db.transaction(async (tx) => {
+		const conversation = (await tx.select({
+			conversationId: juniorConversations.conversationId,
+			transcriptPurgedAt: juniorConversations.transcriptPurgedAt
+		}).from(juniorConversations).where(eq(juniorConversations.conversationId, input.conversationId)).for("update"))[0];
+		if (!conversation) throw new Error(`Conversation ${input.conversationId} is unavailable`);
+		if (conversation.transcriptPurgedAt) {
+			if ((await resolveRootVisibility({ db: () => tx }, input.conversationId)).visibility !== "public") throw new Error(`Cannot append a Brief to purged non-public Conversation ${input.conversationId}`);
+		}
+		const existing = await tx.select().from(juniorConversationBriefs).where(and(eq(juniorConversationBriefs.conversationId, input.conversationId), eq(juniorConversationBriefs.turnId, input.turnId))).limit(1);
+		if (existing[0]) return {
+			inserted: false,
+			value: briefVersionFromRow(existing[0])
+		};
+		const version = ((await tx.select({ version: max(juniorConversationBriefs.version) }).from(juniorConversationBriefs).where(eq(juniorConversationBriefs.conversationId, input.conversationId)))[0]?.version ?? 0) + 1;
+		const row = (await tx.insert(juniorConversationBriefs).values({
+			conversationId: input.conversationId,
+			version,
+			turnId: input.turnId,
+			throughSeq: input.throughSeq,
+			content: conversationBriefSchema.parse(input.content),
+			searchText: input.searchText,
+			modelId: input.modelId,
+			costUsd: input.costUsd ?? null
+		}).onConflictDoNothing({ target: [juniorConversationBriefs.conversationId, juniorConversationBriefs.turnId] }).returning())[0];
+		if (!row) throw new Error("Brief insert conflicted after the Turn check");
+		return {
+			inserted: true,
+			value: briefVersionFromRow(row)
+		};
+	});
 }
-function resolveDashboardBaseURL(config) {
-	const explicit = config.baseURL ?? process.env.JUNIOR_BASE_URL;
-	if (explicit?.trim()) return stripTrailingSlashes(withHttps(explicit.trim()));
-	const vercelProd = process.env.VERCEL_PROJECT_PRODUCTION_URL?.trim();
-	if (vercelProd) return stripTrailingSlashes(withHttps(vercelProd));
-	const vercelUrl = process.env.VERCEL_URL?.trim();
-	if (vercelUrl) return stripTrailingSlashes(withHttps(vercelUrl));
-	return "http://localhost:3000";
+/** Read the Brief version produced for one completed Turn. */
+async function readConversationBriefForTurn(db, conversationId, turnId) {
+	const rows = await db.select().from(juniorConversationBriefs).where(and(eq(juniorConversationBriefs.conversationId, conversationId), eq(juniorConversationBriefs.turnId, turnId))).limit(1);
+	return rows[0] ? briefVersionFromRow(rows[0]) : void 0;
 }
-/** Configure core dashboard links. */
-function setDashboardConversationLinkOptions(options) {
-	const previous = dashboardConversationLinkOptions;
-	dashboardConversationLinkOptions = options?.disabled ? void 0 : options;
-	return previous;
+/** Read the latest Brief version for one Conversation. */
+async function readLatestConversationBrief(db, conversationId) {
+	const rows = await db.select().from(juniorConversationBriefs).where(eq(juniorConversationBriefs.conversationId, conversationId)).orderBy(desc(juniorConversationBriefs.version)).limit(1);
+	return rows[0] ? briefVersionFromRow(rows[0]) : void 0;
 }
-function resolveDashboardPath(segmentPath) {
-	if (!dashboardConversationLinkOptions) return;
-	const baseURL = resolveDashboardBaseURL(dashboardConversationLinkOptions);
-	const basePath = normalizeDashboardPath(dashboardConversationLinkOptions.basePath, "/");
-	return `${baseURL}${basePath === "/" ? segmentPath : `${basePath}${segmentPath}`}`;
+//#endregion
+//#region src/chat/briefs/task.ts
+const BRIEF_LOCK_TTL_MS = 6e5;
+function hasUserInstruction(run) {
+	return run.transcript.some((entry) => entry.type === "message" && entry.role === "user" && entry.provenance?.authority === "instruction");
 }
-/** Build the dashboard conversation URL when the core dashboard is enabled. */
-function getDashboardConversationLink(conversationId) {
-	return resolveDashboardPath(`/conversations/${encodeURIComponent(conversationId)}`);
+function logSkip(context, conversationId, reason) {
+	context.log.info("Brief update skipped", {
+		conversationId,
+		reason
+	});
 }
-/** Build the dashboard task detail URL when the core dashboard is enabled. */
-function getDashboardTaskLink(taskId) {
-	return resolveDashboardPath(`/automations/${encodeURIComponent(taskId)}`);
+async function readTurnCompletedSeq(db, conversationId, turnId) {
+	const seq = (await db.select({ seq: juniorConversationEvents.seq }).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, conversationId), eq(juniorConversationEvents.type, "turn_completed"), sql`${juniorConversationEvents.payload}->>'turnId' = ${turnId}`)).orderBy(desc(juniorConversationEvents.seq)).limit(1))[0]?.seq;
+	if (seq === void 0) throw new Error(`Completed Turn ${turnId} has no terminal event in Conversation ${conversationId}`);
+	return seq;
 }
-/** Public icon asset URL. Headless and local installs keep text-only identity. */
-function getDashboardObjectIconLink(icon) {
-	if (!dashboardConversationLinkOptions) return void 0;
-	const url = new URL(objectIconPath(icon), resolveDashboardBaseURL(dashboardConversationLinkOptions));
-	if (url.protocol !== "https:" || url.hostname === "localhost") return void 0;
-	return url.href;
+async function emitBriefUpdated(context, stored) {
+	await context.events.emit(briefUpdatedEvent({
+		version: stored.version,
+		modelId: stored.modelId,
+		...stored.costUsd !== void 0 ? { costUsd: stored.costUsd } : void 0,
+		decisions: stored.content.decisions.length,
+		openDecisions: stored.content.openDecisions.length,
+		links: stored.content.links.length
+	}));
 }
-//#endregion
-//#region src/chat/state/ttl.ts
-/** Retain expiring conversation/runtime state long enough for resume and dashboard history. */
-const JUNIOR_THREAD_STATE_TTL_MS = 6048e5;
-//#endregion
-//#region src/chat/events/timer-index.ts
-const DUE_KEY = "junior:watches:due";
-const CLAIM_MS = 12e4;
-const BATCH_SIZE = 25;
-const entriesSchema = z.array(z.object({
-	id: z.string(),
-	atMs: z.number()
-}));
-/** Keep timer index operations atomic in Redis and the local memory adapter. */
-async function updateTimerIndex(state, operation) {
-	const redis = await getDefaultRedisStateAdapterFor(state);
-	if (redis) {
-		const prefix = getChatConfig().state.keyPrefix;
-		const key = prefix ? `${prefix}:${DUE_KEY}` : DUE_KEY;
-		const client = redis.getClient();
-		if (operation.kind === "add") {
-			await client.sendCommand([
-				"ZADD",
-				key,
-				String(operation.atMs),
-				operation.id
-			]);
-			return [];
-		}
-		if (operation.kind === "remove") {
-			await client.sendCommand([
-				"ZREM",
-				key,
-				operation.id
-			]);
-			return [];
-		}
-		return await client.sendCommand([
-			"EVAL",
-			`local ids = redis.call('ZRANGEBYSCORE', KEYS[1], '-inf', ARGV[1], 'LIMIT', 0, ARGV[3])
-       for _, id in ipairs(ids) do
-         redis.call('ZADD', KEYS[1], ARGV[2], id)
-       end
-       return ids`,
-			"1",
-			key,
-			String(operation.nowMs),
-			String(operation.nowMs + CLAIM_MS),
-			String(BATCH_SIZE)
-		]);
+/** Generate and store the next Brief after one completed Turn. */
+async function updateConversationBrief(context) {
+	const run = await context.run.load();
+	if (run.source.kind !== "slack" && run.source.kind !== "web" && run.source.kind !== "local") {
+		logSkip(context, run.conversationId, "unsupported_source");
+		return;
 	}
-	const lock = await state.acquireLock(`${DUE_KEY}:lock`, 1e4);
-	if (!lock) throw new Error("Could not acquire timer index lock");
-	try {
-		let entries = entriesSchema.parse(await state.get(DUE_KEY) ?? []);
-		let ids = [];
-		if (operation.kind === "claim") {
-			ids = entries.filter((entry) => entry.atMs <= operation.nowMs).sort((a, b) => a.atMs - b.atMs).slice(0, BATCH_SIZE).map((entry) => entry.id);
-			const claimed = new Set(ids);
-			entries = entries.map((entry) => claimed.has(entry.id) ? {
-				...entry,
-				atMs: operation.nowMs + CLAIM_MS
-			} : entry);
-		} else {
-			entries = entries.filter((entry) => entry.id !== operation.id);
-			if (operation.kind === "add") entries.push({
-				id: operation.id,
-				atMs: operation.atMs
-			});
+	const executor = getSqlExecutor();
+	const conversation = await createSqlStore(executor).get({ conversationId: run.conversationId });
+	if (conversation?.parentConversationId) {
+		logSkip(context, run.conversationId, "child_conversation");
+		return;
+	}
+	if (conversation?.transcriptPurgedAtMs !== void 0) {
+		if ((await resolveRootVisibility(executor, run.conversationId)).visibility !== "public") {
+			logSkip(context, run.conversationId, "purged_private");
+			return;
 		}
-		await state.set(DUE_KEY, entries);
-		return ids;
-	} finally {
-		await state.releaseLock(lock);
 	}
+	if (!hasUserInstruction(run)) {
+		logSkip(context, run.conversationId, "no_user_instruction");
+		return;
+	}
+	await context.state.withLock(`brief:${run.conversationId}`, BRIEF_LOCK_TTL_MS, async () => {
+		const db = context.db;
+		const existing = await readConversationBriefForTurn(db, run.conversationId, run.runId);
+		if (existing) {
+			await emitBriefUpdated(context, existing);
+			logSkip(context, run.conversationId, "turn_already_stored");
+			return;
+		}
+		const terminalSeq = await readTurnCompletedSeq(db, run.conversationId, run.runId);
+		const previous = await readLatestConversationBrief(db, run.conversationId);
+		if (previous && previous.throughSeq >= terminalSeq) {
+			logSkip(context, run.conversationId, "turn_already_covered");
+			return;
+		}
+		const input = await briefInputFromSql(executor, run.conversationId, terminalSeq);
+		const modelId = defaultModelId(botConfig);
+		const generation = await generateBrief({
+			completeObject: (request) => completeObject({
+				...request,
+				modelId,
+				promptName: "junior.brief_update"
+			}),
+			input,
+			previous: previous?.content,
+			prompt: BRIEF_PROMPT,
+			throughIndex: terminalSeq
+		});
+		const stored = await appendConversationBrief(db, {
+			conversationId: run.conversationId,
+			turnId: run.runId,
+			throughSeq: terminalSeq,
+			content: generation.brief,
+			searchText: generation.searchText,
+			modelId,
+			...generation.costUsd !== void 0 ? { costUsd: generation.costUsd } : void 0
+		});
+		await emitBriefUpdated(context, stored.value);
+		if (!stored.inserted) logSkip(context, run.conversationId, "turn_already_stored");
+	});
 }
+/** Core task registration kept outside the installed plugin catalog. */
+const briefsTaskRegistration = {
+	manifest: {
+		name: "briefs",
+		displayName: "Briefs",
+		description: "Durable Conversation Brief generation"
+	},
+	conversationEvents: [briefUpdatedEvent],
+	hooks: { async operationalReport(context) {
+		return await buildBriefsOperationalReport({
+			briefDays: await context.eventStats.costsByDay({
+				days: 90,
+				eventName: "brief_updated"
+			}),
+			db: context.db,
+			nowMs: context.nowMs
+		});
+	} },
+	tasks: { updateBrief: { async run(context) {
+		await updateConversationBrief(context);
+	} } }
+};
 //#endregion
-//#region src/chat/slack/workspace-context.ts
-const workspaceTeamIdStorage = new AsyncLocalStorage();
-/** Run a callback with the Slack workspace team ID for the inbound webhook. */
-function runWithWorkspaceTeamId(teamId, fn) {
-	if (!teamId) return fn();
-	return workspaceTeamIdStorage.run(teamId, fn);
+//#region src/chat/plugins/conversation-events.ts
+function registeredDefinition(plugin, value) {
+	return plugin.conversationEvents?.find((definition) => definition === value.definition);
 }
-/** Return the Slack workspace team ID for the current inbound webhook. */
-function getWorkspaceTeamId() {
-	return workspaceTeamIdStorage.getStore();
+/** Keep operation idempotency stable when a registered event schema advances. */
+function eventIdentityVersion(plugin, definition) {
+	let version = definition.version;
+	for (const candidate of plugin.conversationEvents ?? []) if (candidate.eventName === definition.eventName) version = Math.min(version, candidate.version);
+	return version;
 }
-//#endregion
-//#region src/chat/slack/client.ts
-var SlackActionError = class extends Error {
-	code;
-	apiError;
-	needed;
-	provided;
-	statusCode;
-	requestId;
-	errorData;
-	retryAfterSeconds;
-	detail;
-	detailLine;
-	detailRule;
-	constructor(message, code, options = {}) {
-		super(message);
-		this.name = "SlackActionError";
-		this.code = code;
-		this.apiError = options.apiError;
-		this.needed = options.needed;
-		this.provided = options.provided;
-		this.statusCode = options.statusCode;
-		this.requestId = options.requestId;
-		this.errorData = options.errorData;
-		this.retryAfterSeconds = options.retryAfterSeconds;
-		this.detail = options.detail;
-		this.detailLine = options.detailLine;
-		this.detailRule = options.detailRule;
-	}
-};
-function serializeSlackErrorData(data) {
-	if (!data || typeof data !== "object") return;
-	const filtered = Object.fromEntries(Object.entries(data).filter(([key]) => key !== "error"));
-	if (Object.keys(filtered).length === 0) return;
-	try {
-		const serialized = JSON.stringify(filtered);
-		return serialized.length <= 600 ? serialized : `${serialized.slice(0, 597)}...`;
-	} catch {
-		return;
-	}
+/** Create a conversation-bound writer for one plugin operation. */
+function createPluginConversationEvents(args) {
+	return { async emit(value) {
+		const definition = registeredDefinition(args.plugin, value);
+		if (!definition) throw new Error(`Plugin "${args.plugin.manifest.name}" cannot emit an unregistered conversation event.`);
+		const content = definition.parse(value.data);
+		const identityVersion = eventIdentityVersion(args.plugin, definition);
+		await getConversationEventStore().append(args.conversationId, [{
+			createdAtMs: Date.now(),
+			idempotencyKey: `plugin:${args.plugin.manifest.name}:operation:${args.operationId}:event:${definition.eventName}@${identityVersion}`,
+			data: {
+				type: "structured_event",
+				namespace: args.plugin.manifest.name,
+				name: definition.eventName,
+				version: definition.version,
+				turnId: args.turnId,
+				content
+			}
+		}], { activity: "preserve" });
+	} };
 }
-/** Extract a header value by case-insensitive name from a raw headers object. */
-function getHeaderString(headers, name) {
-	if (!headers || typeof headers !== "object") return;
-	const key = name.toLowerCase();
-	const entries = headers;
-	for (const [entryKey, value] of Object.entries(entries)) {
-		if (entryKey.toLowerCase() !== key) continue;
-		if (typeof value === "string") return value;
-		if (Array.isArray(value)) {
-			const first = value.find((entry) => typeof entry === "string");
-			return typeof first === "string" ? first : void 0;
-		}
-	}
+/** Render a stored plugin event through its currently registered definition. */
+function renderPluginConversationEvent(args) {
+	const definition = [briefsTaskRegistration, ...getPlugins()].find((candidate) => candidate.manifest.name === args.namespace)?.conversationEvents?.find((candidate) => candidate.eventName === args.name && candidate.version === args.version);
+	if (!definition) return void 0;
+	return definition.renderEvent(definition.parse(args.content));
 }
-function parseSlackCanvasDetail(detail) {
-	if (typeof detail !== "string") return {};
-	const trimmed = detail.trim();
-	if (!trimmed) return {};
-	const parsed = { detail: trimmed };
-	const lineMatch = trimmed.match(/line\s+(\d+):/i);
-	if (lineMatch) {
-		const line = Number.parseInt(lineMatch[1] ?? "", 10);
-		if (Number.isFinite(line)) parsed.detailLine = line;
-	}
-	if (/unsupported heading depth/i.test(trimmed)) parsed.detailRule = "unsupported_heading_depth";
-	return parsed;
+//#endregion
+//#region src/api/conversations/membership.ts
+/** True when the viewer is a materialized participant on this root conversation. */
+function conversationHasParticipantUser(userId) {
+	const participant = getDb().select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).where(and(eq(juniorConversationParticipants.rootConversationId, juniorConversations.conversationId), eq(juniorConversationParticipants.userId, userId)));
+	return exists(participant);
 }
 /**
-* Ambient destination-installation token for Slack outbound calls, bound by
-* installation-scoped entry points so writes carry the destination
-* workspace's credentials instead of the process-global env token.
-*/
-const installationTokenStorage = new AsyncLocalStorage();
-const clientsByToken = /* @__PURE__ */ new Map();
-/**
-* Bind a workspace installation token for all Slack Web API calls inside
-* `fn`, so multi-workspace outbound writes use the destination workspace's
-* credentials rather than the env fallback token.
+* True when a verified primary-email user participates on this root
+* conversation. Used only for the actorEmail feed fallback.
 */
-function runWithSlackInstallationToken(token, fn) {
-	const trimmed = token.trim();
-	if (!trimmed) throw new SlackActionError("Slack installation token binding requires a non-empty token", "missing_token");
-	return installationTokenStorage.run({ token: trimmed }, fn);
+function conversationHasParticipantEmail(email) {
+	const participant = getDb().select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).innerJoin(juniorUsers, eq(juniorUsers.id, juniorConversationParticipants.userId)).where(and(eq(juniorConversationParticipants.rootConversationId, juniorConversations.conversationId), eq(juniorUsers.primaryEmailNormalized, email)));
+	return exists(participant);
 }
-/**
-* Token precedence: ambient installation token, then env token, then a hard
-* failure for team-scoped calls — a call scoped to one workspace must never
-* silently fall through to another workspace's credentials.
-*/
-function resolveSlackToken() {
-	const ambientToken = installationTokenStorage.getStore()?.token;
-	if (ambientToken) return ambientToken;
-	const envToken = getSlackBotToken();
-	if (envToken) return envToken;
-	const teamId = getWorkspaceTeamId();
-	if (teamId) throw new SlackActionError(`Slack call is scoped to workspace ${teamId} but no installation token is bound and no default bot token is configured`, "missing_token");
-	throw new SlackActionError("SLACK_BOT_TOKEN (or SLACK_BOT_USER_TOKEN) is required for Slack Web API actions in this service", "missing_token");
+/** True when one user's personal feed has archived this root after the cutoff. */
+function conversationArchivedForUser(userId, archivedAfter) {
+	const archive = getDb().select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).where(and(eq(juniorConversationParticipants.rootConversationId, juniorConversations.conversationId), eq(juniorConversationParticipants.userId, userId), isNotNull(juniorConversationParticipants.archivedAt), archivedAfter ? gte(juniorConversationParticipants.archivedAt, archivedAfter) : void 0));
+	return exists(archive);
 }
-/** Normalize Junior Slack references to native Slack conversation IDs. */
-function normalizeSlackConversationId(channelId) {
-	return parseSlackChannelReferenceId(channelId);
+/** True when one user's personal feed has not archived this root. */
+function conversationNotArchivedForUser(userId) {
+	const archive = getDb().select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).where(and(eq(juniorConversationParticipants.rootConversationId, juniorConversations.conversationId), eq(juniorConversationParticipants.userId, userId), isNotNull(juniorConversationParticipants.archivedAt)));
+	return notExists(archive);
 }
-/**
-* Return the per-token cached WebClient. `withSlackRetries` owns retry
-* classification for this boundary: the WebClient's built-in policy would
-* re-post timed-out writes (a duplicate-message hazard) and sleep for the
-* full unbounded Retry-After inside the request, so both internal behaviors
-* are disabled here.
-*/
-function getClient() {
-	const token = resolveSlackToken();
-	let cached = clientsByToken.get(token);
-	if (!cached) {
-		cached = new WebClient(token, {
-			retryConfig: { retries: 0 },
-			rejectRateLimitedCalls: true
-		});
-		clientsByToken.set(token, cached);
+/** True when one primary-email user's feed archived this root after the cutoff. */
+function conversationArchivedForEmail(email, archivedAfter) {
+	const archive = getDb().select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).innerJoin(juniorUsers, eq(juniorUsers.id, juniorConversationParticipants.userId)).where(and(eq(juniorConversationParticipants.rootConversationId, juniorConversations.conversationId), eq(juniorUsers.primaryEmailNormalized, email), isNotNull(juniorConversationParticipants.archivedAt), archivedAfter ? gte(juniorConversationParticipants.archivedAt, archivedAfter) : void 0));
+	return exists(archive);
+}
+/** True when one primary-email user's personal feed has not archived this root. */
+function conversationNotArchivedForEmail(email) {
+	const archive = getDb().select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).innerJoin(juniorUsers, eq(juniorUsers.id, juniorConversationParticipants.userId)).where(and(eq(juniorConversationParticipants.rootConversationId, juniorConversations.conversationId), eq(juniorUsers.primaryEmailNormalized, email), isNotNull(juniorConversationParticipants.archivedAt)));
+	return notExists(archive);
+}
+/** Root-actor ownership or a materialized participant row for the same person. */
+function viewerConversationMembership(args) {
+	if (args.actorMatch && args.participantMatch) return or(args.actorMatch, args.participantMatch);
+	return args.actorMatch ?? args.participantMatch;
+}
+/** Read personal archive timestamps for a bounded set of conversation roots. */
+async function conversationArchiveTimes(db, conversationIds, subject) {
+	if (!subject || conversationIds.length === 0) return /* @__PURE__ */ new Map();
+	const query = db.select({
+		archivedAt: juniorConversationParticipants.archivedAt,
+		rootConversationId: juniorConversationParticipants.rootConversationId
+	}).from(juniorConversationParticipants);
+	const rows = "userId" in subject ? await query.where(and(eq(juniorConversationParticipants.userId, subject.userId), inArray(juniorConversationParticipants.rootConversationId, [...conversationIds]), isNotNull(juniorConversationParticipants.archivedAt))) : await query.innerJoin(juniorUsers, eq(juniorUsers.id, juniorConversationParticipants.userId)).where(and(eq(juniorUsers.primaryEmailNormalized, subject.email), inArray(juniorConversationParticipants.rootConversationId, [...conversationIds]), isNotNull(juniorConversationParticipants.archivedAt)));
+	return new Map(rows.flatMap((row) => row.archivedAt ? [[row.rootConversationId, row.archivedAt.getTime()]] : []));
+}
+/** Find which of the supplied roots include the linked viewer as a participant. */
+async function conversationIdsWithParticipantUser(db, conversationIds, userId) {
+	if (conversationIds.length === 0) return /* @__PURE__ */ new Set();
+	const rows = await db.select({ rootConversationId: juniorConversationParticipants.rootConversationId }).from(juniorConversationParticipants).where(and(eq(juniorConversationParticipants.userId, userId), inArray(juniorConversationParticipants.rootConversationId, [...conversationIds])));
+	return new Set(rows.map((row) => row.rootConversationId));
+}
+//#endregion
+//#region src/api/conversations/access.ts
+const rootConversation = alias(juniorConversations, "access_root_conversation");
+const rootDestination = alias(juniorDestinations, "access_root_destination");
+const rootIdentity = alias(juniorIdentities, "access_root_identity");
+/** Resolve viewer access for a bounded set of persisted conversations. */
+async function readConversationAccessFromSql(db, conversationIds, viewer) {
+	if (conversationIds.length === 0) return /* @__PURE__ */ new Map();
+	const normalizedViewerEmail = viewer?.email.trim().toLowerCase() || void 0;
+	const rows = await db.select({
+		conversationId: juniorConversations.conversationId,
+		parentConversationId: juniorConversations.parentConversationId,
+		storedRootConversationId: juniorConversations.rootConversationId,
+		rootConversationId: rootConversation.conversationId,
+		rootParentConversationId: rootConversation.parentConversationId,
+		rootRootConversationId: rootConversation.rootConversationId,
+		visibility: rootDestination.visibility,
+		rootEmailNormalized: rootIdentity.emailNormalized,
+		rootEmailVerified: rootIdentity.emailVerified,
+		rootUserId: rootIdentity.userId
+	}).from(juniorConversations).leftJoin(rootConversation, eq(rootConversation.conversationId, juniorConversations.rootConversationId)).leftJoin(rootDestination, eq(rootDestination.id, rootConversation.destinationId)).leftJoin(rootIdentity, eq(rootIdentity.id, rootConversation.actorIdentityId)).where(inArray(juniorConversations.conversationId, [...conversationIds]));
+	const membershipConversationIds = /* @__PURE__ */ new Set();
+	for (const row of rows) {
+		membershipConversationIds.add(row.conversationId);
+		if (row.storedRootConversationId) membershipConversationIds.add(row.storedRootConversationId);
 	}
-	return cached;
+	const participantRootIds = viewer !== void 0 ? await conversationIdsWithParticipantUser(db, [...membershipConversationIds], viewer.id) : /* @__PURE__ */ new Set();
+	return new Map(rows.map((row) => {
+		const validRootConversationId = row.rootConversationId !== null && row.rootConversationId === row.storedRootConversationId && row.rootRootConversationId === row.rootConversationId && row.rootParentConversationId === null && (row.parentConversationId !== null || row.storedRootConversationId === row.conversationId) ? row.rootConversationId ?? void 0 : void 0;
+		const visibility = validRootConversationId === void 0 ? null : row.visibility;
+		const isRootActor = validRootConversationId !== void 0 && viewer !== void 0 && (row.rootUserId === viewer.id || normalizedViewerEmail !== void 0 && row.rootEmailVerified === true && row.rootEmailNormalized === normalizedViewerEmail);
+		const isMaterializedParticipant = participantRootIds.has(row.conversationId) || validRootConversationId !== void 0 && participantRootIds.has(validRootConversationId);
+		const isParticipant = isRootActor || isMaterializedParticipant;
+		const canViewPrivateContent = isParticipant || validRootConversationId !== void 0 && canExposeConversationPayload({ visibility: visibility ?? void 0 });
+		return [row.conversationId, {
+			canViewPrivateContent,
+			isParticipant,
+			visibility
+		}];
+	}));
 }
-function mapSlackError(error) {
-	if (error instanceof SlackActionError) return error;
-	const candidate = error;
-	const apiError = candidate.data?.error;
-	const message = candidate.message ?? "Slack action failed";
-	const baseOptions = {
-		apiError,
-		statusCode: candidate.statusCode,
-		requestId: getHeaderString(candidate.headers, "x-slack-req-id"),
-		errorData: serializeSlackErrorData(candidate.data),
-		...parseSlackCanvasDetail(candidate.data?.detail)
-	};
-	if (apiError === "missing_scope") return new SlackActionError(message, "missing_scope", {
-		...baseOptions,
-		needed: candidate.data?.needed,
-		provided: candidate.data?.provided
-	});
-	if (apiError === "not_in_channel") return new SlackActionError(message, "not_in_channel", baseOptions);
-	if (apiError === "restricted_action_read_only_channel") return new SlackActionError(message, "read_only_channel", baseOptions);
-	if (apiError === "already_reacted") return new SlackActionError(message, "already_reacted", baseOptions);
-	if (apiError === "no_reaction") return new SlackActionError(message, "no_reaction", baseOptions);
-	if (apiError === "invalid_arguments") return new SlackActionError(message, "invalid_arguments", baseOptions);
-	if (apiError === "invalid_cursor") return new SlackActionError(message, "invalid_arguments", baseOptions);
-	if (apiError === "invalid_name") return new SlackActionError(message, "invalid_arguments", baseOptions);
-	if (apiError === "not_found" || apiError === "channel_not_found" || apiError === "message_not_found") return new SlackActionError(message, "not_found", baseOptions);
-	if (apiError === "feature_not_enabled" || apiError === "not_allowed_token_type") return new SlackActionError(message, "feature_unavailable", baseOptions);
-	if (apiError === "canvas_creation_failed") return new SlackActionError(message, "canvas_creation_failed", baseOptions);
-	if (apiError === "canvas_editing_failed") return new SlackActionError(message, "canvas_editing_failed", baseOptions);
-	if (candidate.code === "slack_webapi_rate_limited_error" || candidate.statusCode === 429) return new SlackActionError(message, "rate_limited", {
-		...baseOptions,
-		retryAfterSeconds: candidate.retryAfter
-	});
-	return new SlackActionError(message, "internal_error", baseOptions);
+//#endregion
+//#region src/chat/plugins/conversation-event-reader.ts
+function registeredEventName$1(plugin, eventName) {
+	if (!plugin.conversationEvents?.some((definition) => definition.eventName === eventName)) throw new TypeError(`Plugin "${plugin.manifest.name}" did not register event "${eventName}"`);
+	return eventName;
 }
-const MAX_RETRY_DELAY_MS = 1e4;
-const MAX_TOTAL_RETRY_DELAY_MS = 2e4;
-const CONNECTION_ERROR_CODES = /* @__PURE__ */ new Set([
-	"ECONNREFUSED",
-	"ECONNRESET",
-	"ENOTFOUND",
-	"EAI_AGAIN"
-]);
-const TIMEOUT_ERROR_CODES = /* @__PURE__ */ new Set([
-	"ETIMEDOUT",
-	"ECONNABORTED",
-	"ESOCKETTIMEDOUT"
-]);
-function findNetworkErrorCode(error, depth = 0) {
-	if (!error || typeof error !== "object" || depth > 4) return;
-	const candidate = error;
-	if (typeof candidate.code === "string" && (CONNECTION_ERROR_CODES.has(candidate.code) || TIMEOUT_ERROR_CODES.has(candidate.code))) return candidate.code;
-	return findNetworkErrorCode(candidate.original, depth + 1) ?? findNetworkErrorCode(candidate.cause, depth + 1);
+/** Create Conversation event reads bound to one plugin namespace. */
+function createPluginConversationEventReader(plugin) {
+	return { async list(input) {
+		const eventName = registeredEventName$1(plugin, input.eventName);
+		const db = getDb();
+		if (!(await readConversationAccessFromSql(db, [input.conversationId], input.viewer)).get(input.conversationId)?.canViewPrivateContent) return void 0;
+		return (await db.select({
+			content: sql`${juniorConversationEvents.payload}->'content'`,
+			createdAt: juniorConversationEvents.createdAt,
+			version: sql`(${juniorConversationEvents.payload}->>'version')::integer`
+		}).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, input.conversationId), eq(juniorConversationEvents.type, "structured_event"), sql`${juniorConversationEvents.payload}->>'namespace' = ${plugin.manifest.name}`, sql`${juniorConversationEvents.payload}->>'name' = ${eventName}`)).orderBy(desc(juniorConversationEvents.seq))).map((row) => ({
+			content: row.content,
+			createdAt: row.createdAt.toISOString(),
+			version: row.version
+		}));
+	} };
 }
-function hasSocketHangUpMessage(error) {
-	return error instanceof Error && error.message.toLowerCase().includes("socket hang up");
+//#endregion
+//#region src/chat/plugins/conversation-event-stats.ts
+const DAY_MS = 864e5;
+const costRowSchema = z.object({
+	costUsd: z.number().finite().nonnegative(),
+	date: z.string().regex(/^\d{4}-\d{2}-\d{2}(T\d{2})?$/),
+	events: z.number().int().nonnegative()
+}).strict();
+function startOfUtcDay(value) {
+	const date = new Date(value);
+	date.setUTCHours(0, 0, 0, 0);
+	return date;
 }
-/**
-* Classify a failed Slack call for retry: rate limits, Slack 5xx, and
-* connection-phase failures are always retryable; timeouts are retried only
-* for idempotent operations because Slack may already have accepted the
-* request.
-*/
-function classifySlackRetry(raw, mapped) {
-	if (mapped.code === "rate_limited") return "rate_limited";
-	if (mapped.statusCode !== void 0 && mapped.statusCode >= 500) return "server_error";
-	const networkCode = findNetworkErrorCode(raw);
-	if (networkCode && CONNECTION_ERROR_CODES.has(networkCode)) return "connection";
-	if (networkCode && TIMEOUT_ERROR_CODES.has(networkCode)) return "timeout";
-	if (hasSocketHangUpMessage(raw)) return "connection";
-	return "none";
+function registeredEventName(plugin, eventName) {
+	if (!plugin.conversationEvents?.some((definition) => definition.eventName === eventName)) throw new TypeError(`Plugin "${plugin.manifest.name}" did not register event "${eventName}"`);
+	return eventName;
 }
-/**
-* Run a Slack Web API call with bounded retries so transient platform
-* failures do not surface as turn failures, while non-idempotent posts are
-* never re-sent when Slack may already have accepted them.
-*
-* Retry classes: rate limits (bounded Retry-After), connection-phase network
-* failures, and Slack 5xx responses always retry; request timeouts retry only
-* when the caller marks the operation `idempotent`.
-*/
-async function withSlackRetries(task, maxAttempts = 3, context = {}) {
-	let attempt = 0;
-	let totalDelayMs = 0;
-	const action = context.action ?? "unknown";
-	while (attempt < maxAttempts) {
-		attempt += 1;
-		const attemptNumber = attempt;
-		try {
-			return await withSpan(`POST slack.com/api/${action}`, "http.client", {}, async () => {
-				try {
-					return await task();
-				} catch (error) {
-					const mapped = mapSlackError(error);
-					const errorAttrs = { "error.type": mapped.code };
-					if (mapped.apiError) errorAttrs["app.slack.api_error_code"] = mapped.apiError;
-					if (mapped.code === "rate_limited") {
-						errorAttrs["http.response.status_code"] = 429;
-						if (mapped.retryAfterSeconds) errorAttrs["app.slack.retry_after_ms"] = mapped.retryAfterSeconds * 1e3;
-					} else if (mapped.statusCode != null) errorAttrs["http.response.status_code"] = mapped.statusCode;
-					setSpanAttributes(errorAttrs);
-					setSpanStatus("error");
-					throw error;
-				}
-			}, {
-				"http.request.method": "POST",
-				"server.address": "slack.com",
-				"url.scheme": "https",
-				"url.path": `/api/${action}`,
-				"app.slack.method": action,
-				"app.retry.max_attempts": maxAttempts,
-				...attemptNumber > 1 ? { "http.request.resend_count": attemptNumber - 1 } : void 0,
-				...context.attributes ?? {},
-				...context.spanAttributes ?? {}
+/** Create aggregate event-cost reads bound to one plugin's registered namespace. */
+function createPluginConversationEventStats(plugin, now = Date.now) {
+	return {
+		async costsByHour(input) {
+			const eventName = registeredEventName(plugin, input.eventName);
+			const hourCount = input.hours ?? 24;
+			const end = new Date(now());
+			end.setUTCMinutes(0, 0, 0);
+			const start = /* @__PURE__ */ new Date(end.getTime() - (hourCount - 1) * 60 * 60 * 1e3);
+			const endExclusive = new Date(end.getTime() + 36e5);
+			const date = sql`TO_CHAR(
+        ${juniorConversationEvents.createdAt} AT TIME ZONE 'UTC',
+        'YYYY-MM-DD"T"HH24'
+      )`;
+			const cost = sql`CASE
+        WHEN jsonb_typeof(${juniorConversationEvents.payload}->'content'->'costUsd') = 'number'
+          THEN (${juniorConversationEvents.payload}->'content'->>'costUsd')::double precision
+        ELSE 0
+      END`;
+			const rows = await getDb().select({
+				costUsd: sql`SUM(${cost})::double precision`.mapWith(Number),
+				date,
+				events: sql`COUNT(*)::integer`.mapWith(Number)
+			}).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.type, "structured_event"), sql`${juniorConversationEvents.payload}->>'namespace' = ${plugin.manifest.name}`, sql`${juniorConversationEvents.payload}->>'name' = ${eventName}`, gte(juniorConversationEvents.createdAt, start), lt(juniorConversationEvents.createdAt, endExclusive))).groupBy(date);
+			const byHour = new Map(z.array(costRowSchema).parse(rows).map((row) => [row.date, row]));
+			return Array.from({ length: hourCount }, (_, index) => {
+				const key = new Date(start.getTime() + index * 60 * 60 * 1e3).toISOString().slice(0, 13);
+				return byHour.get(key) ?? {
+					costUsd: 0,
+					date: key,
+					events: 0
+				};
 			});
-		} catch (error) {
-			const mapped = mapSlackError(error);
-			const retryClass = classifySlackRetry(error, mapped);
-			const isRetryable = retryClass === "rate_limited" || retryClass === "connection" || retryClass === "server_error" || retryClass === "timeout" && context.idempotent === true;
-			const remainingDelayBudgetMs = MAX_TOTAL_RETRY_DELAY_MS - totalDelayMs;
-			const baseLogAttributes = {
-				"app.slack.action": action,
-				"app.slack.error_code": mapped.code,
-				...mapped.apiError ? { "app.slack.api_error": mapped.apiError } : void 0,
-				...mapped.detail ? { "app.slack.detail": mapped.detail } : void 0,
-				...mapped.detailLine !== void 0 ? { "app.slack.detail_line": mapped.detailLine } : void 0,
-				...mapped.detailRule ? { "app.slack.detail_rule": mapped.detailRule } : void 0,
-				...mapped.requestId ? { "app.slack.request_id": mapped.requestId } : void 0,
-				...mapped.statusCode !== void 0 ? { "http.response.status_code": mapped.statusCode } : void 0,
-				...context.attributes ?? {}
-			};
-			if (!isRetryable || attempt >= maxAttempts || remainingDelayBudgetMs <= 0) {
-				logWarn("slack.action.failed", {
-					...baseLogAttributes,
-					...mapped.errorData ? { "app.slack.error_data": mapped.errorData } : void 0
-				});
-				throw mapped;
+		},
+		async costsByDay(input) {
+			const eventName = registeredEventName(plugin, input.eventName);
+			const end = startOfUtcDay(now());
+			const start = /* @__PURE__ */ new Date(end.getTime() - (input.days - 1) * DAY_MS);
+			const endExclusive = new Date(end.getTime() + DAY_MS);
+			const date = sql`TO_CHAR(
+        ${juniorConversationEvents.createdAt} AT TIME ZONE 'UTC',
+        'YYYY-MM-DD'
+      )`;
+			const cost = sql`CASE
+        WHEN jsonb_typeof(${juniorConversationEvents.payload}->'content'->'costUsd') = 'number'
+          THEN (${juniorConversationEvents.payload}->'content'->>'costUsd')::double precision
+        ELSE 0
+      END`;
+			const rows = await getDb().select({
+				costUsd: sql`SUM(${cost})::double precision`.mapWith(Number),
+				date,
+				events: sql`COUNT(*)::integer`.mapWith(Number)
+			}).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.type, "structured_event"), sql`${juniorConversationEvents.payload}->>'namespace' = ${plugin.manifest.name}`, sql`${juniorConversationEvents.payload}->>'name' = ${eventName}`, gte(juniorConversationEvents.createdAt, start), lt(juniorConversationEvents.createdAt, endExclusive))).groupBy(date);
+			const byDate = new Map(z.array(costRowSchema).parse(rows).map((row) => [row.date, row]));
+			return Array.from({ length: input.days }, (_, index) => {
+				const date = new Date(start.getTime() + index * DAY_MS).toISOString().slice(0, 10);
+				return byDate.get(date) ?? {
+					costUsd: 0,
+					date,
+					events: 0
+				};
+			});
+		}
+	};
+}
+//#endregion
+//#region src/chat/plugins/logging.ts
+/** Create the host logger exposed to plugin hooks. */
+function createPluginLogger(plugin) {
+	return {
+		info(message, metadata) {
+			logInfo("plugin.log.info", {
+				"app.log.message": message,
+				"app.plugin.name": plugin,
+				...metadata
+			});
+		},
+		warn(message, metadata) {
+			logWarn("plugin.log.warn", {
+				"app.log.message": message,
+				"app.plugin.name": plugin,
+				...metadata
+			});
+		},
+		error(message, metadata) {
+			logException(new Error(message), "plugin.log.error", {
+				"app.plugin.name": plugin,
+				...metadata
+			});
+		}
+	};
+}
+//#endregion
+//#region src/chat/plugins/model.ts
+/** Create the host-owned structured model capability exposed to plugins. */
+function createPluginModel(pluginName, options = {}, runtime = {}) {
+	return { async completeObject(input) {
+		const modelId = options.structuredModelId ?? (options.structuredModel === "default" ? defaultModelId(botConfig) : botConfig.fastModelId);
+		const result = await completeObject({
+			modelId,
+			schema: input.schema,
+			prompt: input.prompt,
+			...input.system !== void 0 ? { system: input.system } : void 0,
+			...input.maxTokens !== void 0 ? { maxTokens: input.maxTokens } : void 0,
+			signal: runtime.signal,
+			promptName: `${pluginName}.structured_completion`,
+			metadata: {
+				pluginName,
+				pluginModelRole: "structured"
+			}
+		});
+		return {
+			object: result.object,
+			...result.costUsd !== void 0 ? { costUsd: result.costUsd } : void 0
+		};
+	} };
+}
+/** Create the host-owned embedding capability exposed to prompt hooks. */
+function createPluginEmbedder(pluginName, runtime = {}) {
+	return { async embedTexts(input) {
+		return await embedTexts({
+			modelId: botConfig.embeddingModelId,
+			texts: input.texts,
+			signal: runtime.signal,
+			metadata: {
+				pluginName,
+				pluginModelRole: "embedding"
+			}
+		});
+	} };
+}
+//#endregion
+//#region src/chat/plugins/state.ts
+const MAX_PLUGIN_STATE_KEY_LENGTH = 512;
+function hashKeyPart(value) {
+	return createHash("sha256").update(value).digest("hex").slice(0, 32);
+}
+function pluginStateKey(plugin, key) {
+	const pluginPrefix = `junior:${plugin}`;
+	if (key === pluginPrefix || key.startsWith(`${pluginPrefix}:`)) return key;
+	return `junior:plugin_state:${hashKeyPart(plugin)}:${hashKeyPart(key)}`;
+}
+function validatePluginStateKey(key) {
+	if (!key.trim()) throw new Error("Plugin state key is required");
+	if (key.length > MAX_PLUGIN_STATE_KEY_LENGTH) throw new Error("Plugin state key exceeds the maximum length");
+}
+/** Create a durable state namespace scoped to one plugin. */
+function createPluginState(plugin, adapter) {
+	const getAdapter = () => adapter ?? getStateAdapter();
+	return {
+		async delete(key) {
+			validatePluginStateKey(key);
+			const state = getAdapter();
+			await state.connect();
+			await state.delete(pluginStateKey(plugin, key));
+		},
+		async get(key) {
+			validatePluginStateKey(key);
+			const state = getAdapter();
+			await state.connect();
+			return await state.get(pluginStateKey(plugin, key)) ?? void 0;
+		},
+		async set(key, value, ttlMs) {
+			validatePluginStateKey(key);
+			const state = getAdapter();
+			await state.connect();
+			await state.set(pluginStateKey(plugin, key), value, ttlMs);
+		},
+		async setIfNotExists(key, value, ttlMs) {
+			validatePluginStateKey(key);
+			const state = getAdapter();
+			await state.connect();
+			return await state.setIfNotExists(pluginStateKey(plugin, key), value, ttlMs);
+		},
+		async withLock(key, ttlMs, callback) {
+			validatePluginStateKey(key);
+			const state = getAdapter();
+			await state.connect();
+			const lockKey = pluginStateKey(plugin, key);
+			const lock = await state.acquireLock(lockKey, ttlMs);
+			if (!lock) throw new Error(`Could not acquire plugin state lock for ${key}`);
+			try {
+				return await callback();
+			} finally {
+				await state.releaseLock(lock);
 			}
-			logWarn("slack.action.retrying", {
-				...baseLogAttributes,
-				"app.slack.retry_attempt": attempt,
-				"app.slack.retry_class": retryClass
-			});
-			const retryAfterMs = retryClass === "rate_limited" && mapped.retryAfterSeconds && mapped.retryAfterSeconds > 0 ? mapped.retryAfterSeconds * 1e3 : void 0;
-			const backoffMs = Math.min(2e3, 250 * 2 ** (attempt - 1));
-			const delayMs = Math.min(retryAfterMs ?? backoffMs, MAX_RETRY_DELAY_MS, remainingDelayBudgetMs);
-			totalDelayMs += delayMs;
-			await sleep$1(delayMs);
 		}
-	}
-	throw new SlackActionError("Slack action exhausted retries", "internal_error");
+	};
 }
-/**
-* Slack Web API client for the current destination workspace: the ambient
-* installation token when one is bound, otherwise the env bot token for
-* single-workspace deployments. Fails instead of falling back when the call
-* is workspace-scoped and no installation token can be resolved, so a write
-* never goes out with another workspace's credentials.
-*/
-function getSlackClient(options) {
-	if (options) return new WebClient(resolveSlackToken(), {
-		retryConfig: { retries: 0 },
-		rejectRateLimitedCalls: true,
-		timeout: options.timeoutMs
-	});
-	return getClient();
+//#endregion
+//#region src/chat/dashboard-link.ts
+let dashboardConversationLinkOptions;
+function withHttps(host) {
+	return /^https?:\/\//.test(host) ? host : `https://${host}`;
 }
-/**
-* Slack channel ID prefixes:
-* - C: channel — modern private channels also use C, so the prefix never
-*   proves a channel is public
-* - G: legacy private channel / group DM
-* - D: direct message (1:1)
-*/
-function isDmChannel(channelId) {
-	const normalized = normalizeSlackConversationId(channelId);
-	return Boolean(normalized && normalized.startsWith("D"));
+function stripTrailingSlashes(value) {
+	let end = value.length;
+	while (end > 1 && value.charCodeAt(end - 1) === 47) end -= 1;
+	return end === value.length ? value : value.slice(0, end);
 }
-/**
-* Conversation-scoped Slack contexts backed by a concrete conversation ID.
-* Includes channels/groups/DMs (C/G/D).
-*/
-function isConversationScopedChannel(channelId) {
-	const normalized = normalizeSlackConversationId(channelId);
-	if (!normalized) return false;
-	return normalized.startsWith("C") || normalized.startsWith("G") || normalized.startsWith("D");
+function normalizeDashboardPath(path, fallback) {
+	const value = path?.trim() || fallback;
+	return stripTrailingSlashes(value.startsWith("/") ? value : `/${value}`);
 }
-function isConversationChannel(channelId) {
-	const normalized = normalizeSlackConversationId(channelId);
-	if (!normalized) return false;
-	return normalized.startsWith("C") || normalized.startsWith("G");
+function resolveDashboardBaseURL(config) {
+	const explicit = config.baseURL ?? process.env.JUNIOR_BASE_URL;
+	if (explicit?.trim()) return stripTrailingSlashes(withHttps(explicit.trim()));
+	const vercelProd = process.env.VERCEL_PROJECT_PRODUCTION_URL?.trim();
+	if (vercelProd) return stripTrailingSlashes(withHttps(vercelProd));
+	const vercelUrl = process.env.VERCEL_URL?.trim();
+	if (vercelUrl) return stripTrailingSlashes(withHttps(vercelUrl));
+	return "http://localhost:3000";
 }
-async function getFilePermalink(fileId) {
-	const client = getClient();
-	return (await withSlackRetries(() => client.files.info({ file: fileId }), 3, {
-		action: "files.info",
-		idempotent: true,
-		spanAttributes: { "app.slack.file_id": fileId }
-	})).file?.permalink;
+/** Configure core dashboard links. */
+function setDashboardConversationLinkOptions(options) {
+	const previous = dashboardConversationLinkOptions;
+	dashboardConversationLinkOptions = options?.disabled ? void 0 : options;
+	return previous;
 }
-async function downloadPrivateSlackFile(url) {
-	const token = resolveSlackToken();
-	return withSpan("GET files.slack.com", "http.client", {}, async () => {
-		const response = await fetch(url, { headers: { Authorization: `Bearer ${token}` } });
-		setSpanAttributes({ "http.response.status_code": response.status });
-		if (!response.ok) {
-			setSpanAttributes({ "error.type": String(response.status) });
-			setSpanStatus("error");
-			throw new Error(`Slack file download failed: ${response.status}`);
+function resolveDashboardPath(segmentPath) {
+	if (!dashboardConversationLinkOptions) return;
+	const baseURL = resolveDashboardBaseURL(dashboardConversationLinkOptions);
+	const basePath = normalizeDashboardPath(dashboardConversationLinkOptions.basePath, "/");
+	return `${baseURL}${basePath === "/" ? segmentPath : `${basePath}${segmentPath}`}`;
+}
+/** Build the dashboard conversation URL when the core dashboard is enabled. */
+function getDashboardConversationLink(conversationId) {
+	return resolveDashboardPath(`/conversations/${encodeURIComponent(conversationId)}`);
+}
+/** Build the dashboard task detail URL when the core dashboard is enabled. */
+function getDashboardTaskLink(taskId) {
+	return resolveDashboardPath(`/automations/${encodeURIComponent(taskId)}`);
+}
+/** Public icon asset URL. Headless and local installs keep text-only identity. */
+function getDashboardObjectIconLink(icon) {
+	if (!dashboardConversationLinkOptions) return void 0;
+	const url = new URL(objectIconPath(icon), resolveDashboardBaseURL(dashboardConversationLinkOptions));
+	if (url.protocol !== "https:" || url.hostname === "localhost") return void 0;
+	return url.href;
+}
+//#endregion
+//#region src/chat/state/ttl.ts
+/** Retain expiring conversation/runtime state long enough for resume and dashboard history. */
+const JUNIOR_THREAD_STATE_TTL_MS = 6048e5;
+//#endregion
+//#region src/chat/events/timer-index.ts
+const DUE_KEY = "junior:watches:due";
+const CLAIM_MS = 12e4;
+const BATCH_SIZE = 25;
+const entriesSchema = z.array(z.object({
+	id: z.string(),
+	atMs: z.number()
+}));
+/** Keep timer index operations atomic in Redis and the local memory adapter. */
+async function updateTimerIndex(state, operation) {
+	const redis = await getDefaultRedisStateAdapterFor(state);
+	if (redis) {
+		const prefix = getChatConfig().state.keyPrefix;
+		const key = prefix ? `${prefix}:${DUE_KEY}` : DUE_KEY;
+		const client = redis.getClient();
+		if (operation.kind === "add") {
+			await client.sendCommand([
+				"ZADD",
+				key,
+				String(operation.atMs),
+				operation.id
+			]);
+			return [];
 		}
-		return Buffer.from(await response.arrayBuffer());
-	}, {
-		"http.request.method": "GET",
-		"server.address": "files.slack.com",
-		"url.scheme": "https",
-		"app.slack.method": "files.download"
-	});
+		if (operation.kind === "remove") {
+			await client.sendCommand([
+				"ZREM",
+				key,
+				operation.id
+			]);
+			return [];
+		}
+		return await client.sendCommand([
+			"EVAL",
+			`local ids = redis.call('ZRANGEBYSCORE', KEYS[1], '-inf', ARGV[1], 'LIMIT', 0, ARGV[3])
+       for _, id in ipairs(ids) do
+         redis.call('ZADD', KEYS[1], ARGV[2], id)
+       end
+       return ids`,
+			"1",
+			key,
+			String(operation.nowMs),
+			String(operation.nowMs + CLAIM_MS),
+			String(BATCH_SIZE)
+		]);
+	}
+	const lock = await state.acquireLock(`${DUE_KEY}:lock`, 1e4);
+	if (!lock) throw new Error("Could not acquire timer index lock");
+	try {
+		let entries = entriesSchema.parse(await state.get(DUE_KEY) ?? []);
+		let ids = [];
+		if (operation.kind === "claim") {
+			ids = entries.filter((entry) => entry.atMs <= operation.nowMs).sort((a, b) => a.atMs - b.atMs).slice(0, BATCH_SIZE).map((entry) => entry.id);
+			const claimed = new Set(ids);
+			entries = entries.map((entry) => claimed.has(entry.id) ? {
+				...entry,
+				atMs: operation.nowMs + CLAIM_MS
+			} : entry);
+		} else {
+			entries = entries.filter((entry) => entry.id !== operation.id);
+			if (operation.kind === "add") entries.push({
+				id: operation.id,
+				atMs: operation.atMs
+			});
+		}
+		await state.set(DUE_KEY, entries);
+		return ids;
+	} finally {
+		await state.releaseLock(lock);
+	}
 }
 //#endregion
 //#region src/chat/credentials/subject.ts
@@ -3639,7 +3730,22 @@ function getPluginTools(context, sandbox = createSandboxCapability(context.works
 			events,
 			sandbox,
 			state: createPluginState(pluginName),
-			users: { resolveActor },
+			users: {
+				resolveActor,
+				async resolveTimezone() {
+					const actor = context.actor;
+					const resolved = await resolveActor();
+					return await resolveUserTimezone({
+						db: getDb(),
+						nowMs: Date.now(),
+						...actor?.platform === "slack" ? { slack: {
+							teamId: actor.teamId,
+							userId: actor.userId
+						} } : void 0,
+						...resolved?.user ? { userId: resolved.user.id } : void 0
+					});
+				}
+			},
 			workspaces: { async findByRepository(input) {
 				return await listWorkspaceNamesByRepository(getDb(), input);
 			} }
@@ -4204,4 +4310,4 @@ function createPluginHookRunner(input = {}) {
 	};
 }
 //#endregion
-export { verifySlackDirectCredentialSubject as $, getWorkspaceSnapshotBuilder as A, viewerConversationMembership as At, cancelWatch as B, saveObjectAnnotations as Bt, WorkspaceValidationError as C, conversationArchiveTimes as Ct, setWorkspaceSnapshotBuild as D, conversationHasParticipantUser as Dt, setWorkspaceSnapshot as E, conversationHasParticipantEmail as Et, RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS as F, getSlackFileId as Ft, findMatchingWatches as G, agentsInstructionsUpdatedEvent as Gt, createTimerWatch as H, listConversationAnnotations as Ht, RESOURCE_SUBSCRIPTION_MAX_TTL_MS as I, matchSlackAttachments as It, bindEventAutomationCredentialSubject as J, listWatches as K, authenticationLinkedEvent as Kt, RESOURCE_WATCH_TOOL_SOURCE as L, readAttachmentVisionSummary as Lt, workspaceRepoCheckoutPath as M, readLatestConversationBrief as Mt, resolveChannelCapabilities as N, readConversationEventPage as Nt, SANDBOX_RUNTIME as O, conversationNotArchivedForEmail as Ot, getSlackToolContext as P, buildSentryConversationUrl as Pt, verifyScheduledAutomationCredentialSubject as Q, STOP_WATCHING_TOOL_NAME as R, recordSlackAttachment as Rt, updateWorkspace as S, readConversationAccessFromSql as St, loadSnapshotsForProfile as T, conversationArchivedForUser as Tt, createWatch as U, listConversationAnnotationsById as Ut, collectEventMatchKeys as V, createPluginAnnotations as Vt, deliverWatch as W, JUNIOR_NATIVE_EVENT_NAMESPACE as Wt, bindSlackDirectCredentialSubject as X, bindScheduledAutomationCredentialSubject as Y, verifyEventAutomationCredentialSubject as Z, deleteWorkspace as _, setDashboardConversationLinkOptions as _t, getPluginRoutes as a, getSlackClient as at, listWorkspaces as b, createPluginModel as bt, getPluginTools as c, normalizeSlackConversationId as ct, setPlugins as d, getWorkspaceTeamId as dt, verifyTimerWatchCredentialSubject as et, validatePlugins as f, runWithWorkspaceTeamId as ft, createWorkspace as g, getDashboardTaskLink as gt, setBriefsConfig as h, getDashboardObjectIconLink as ht, getPluginApiRoutes as i, getHeaderString as it, tryWorkspaceRepoCheckoutPath as j, createPluginConversationEvents as jt, deleteWorkspaceSnapshotBuilders as k, conversationNotArchivedForUser as kt, getPluginUserPromptContributions as l, runWithSlackInstallationToken as lt, registration_exports as m, getDashboardConversationLink as mt, applyPluginFormatMarkdown as n, downloadPrivateSlackFile as nt, getPluginSlackConversationLink as o, isConversationScopedChannel as ot, coreTaskRegistrations as p, JUNIOR_THREAD_STATE_TTL_MS as pt, takeDueTimerWatches as q, authenticationUnlinkedEvent as qt, createPluginHookRunner as r, getFilePermalink as rt, getPluginSystemPromptContributions as s, isDmChannel as st, agent_hooks_exports as t, SlackActionError as tt, getPlugins as u, withSlackRetries as ut, getWorkspace as v, createPluginState as vt, invalidateReadySnapshot as w, conversationArchivedForEmail as wt, listWorkspacesByRepository as x, createPluginLogger as xt, getWorkspaceByName as y, createPluginEmbedder as yt, cancelSubscriptions as z, resolveRootVisibility as zt };
+export { verifySlackDirectCredentialSubject as $, getWorkspaceSnapshotBuilder as A, listConversationAnnotations as At, cancelWatch as B, isConversationScopedChannel as Bt, WorkspaceValidationError as C, getSlackFileId as Ct, setWorkspaceSnapshotBuild as D, resolveRootVisibility as Dt, setWorkspaceSnapshot as E, recordSlackAttachment as Et, RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS as F, SlackActionError as Ft, findMatchingWatches as G, getWorkspaceTeamId as Gt, createTimerWatch as H, normalizeSlackConversationId as Ht, RESOURCE_SUBSCRIPTION_MAX_TTL_MS as I, downloadPrivateSlackFile as It, bindEventAutomationCredentialSubject as J, agentsInstructionsUpdatedEvent as Jt, listWatches as K, runWithWorkspaceTeamId as Kt, RESOURCE_WATCH_TOOL_SOURCE as L, getFilePermalink as Lt, workspaceRepoCheckoutPath as M, defaultTimezone as Mt, resolveChannelCapabilities as N, resolveUserTimezone as Nt, SANDBOX_RUNTIME as O, saveObjectAnnotations as Ot, getSlackToolContext as P, lookupSlackUser as Pt, verifyScheduledAutomationCredentialSubject as Q, STOP_WATCHING_TOOL_NAME as R, getHeaderString as Rt, updateWorkspace as S, buildSentryConversationUrl as St, loadSnapshotsForProfile as T, readAttachmentVisionSummary as Tt, createWatch as U, runWithSlackInstallationToken as Ut, collectEventMatchKeys as V, isDmChannel as Vt, deliverWatch as W, withSlackRetries as Wt, bindSlackDirectCredentialSubject as X, authenticationUnlinkedEvent as Xt, bindScheduledAutomationCredentialSubject as Y, authenticationLinkedEvent as Yt, verifyEventAutomationCredentialSubject as Z, deleteWorkspace as _, conversationNotArchivedForUser as _t, getPluginRoutes as a, setDashboardConversationLinkOptions as at, listWorkspaces as b, readLatestConversationBrief as bt, getPluginTools as c, createPluginModel as ct, setPlugins as d, conversationArchiveTimes as dt, verifyTimerWatchCredentialSubject as et, validatePlugins as f, conversationArchivedForEmail as ft, createWorkspace as g, conversationNotArchivedForEmail as gt, setBriefsConfig as h, conversationHasParticipantUser as ht, getPluginApiRoutes as i, getDashboardTaskLink as it, tryWorkspaceRepoCheckoutPath as j, listConversationAnnotationsById as jt, deleteWorkspaceSnapshotBuilders as k, createPluginAnnotations as kt, getPluginUserPromptContributions as l, createPluginLogger as lt, registration_exports as m, conversationHasParticipantEmail as mt, applyPluginFormatMarkdown as n, getDashboardConversationLink as nt, getPluginSlackConversationLink as o, createPluginState as ot, coreTaskRegistrations as p, conversationArchivedForUser as pt, takeDueTimerWatches as q, JUNIOR_NATIVE_EVENT_NAMESPACE as qt, createPluginHookRunner as r, getDashboardObjectIconLink as rt, getPluginSystemPromptContributions as s, createPluginEmbedder as st, agent_hooks_exports as t, JUNIOR_THREAD_STATE_TTL_MS as tt, getPlugins as u, readConversationAccessFromSql as ut, getWorkspace as v, viewerConversationMembership as vt, invalidateReadySnapshot as w, matchSlackAttachments as wt, listWorkspacesByRepository as x, readConversationEventPage as xt, getWorkspaceByName as y, createPluginConversationEvents as yt, cancelSubscriptions as z, getSlackClient as zt };